fffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ec3f009b1d10435ee429bf98e0b95017552dee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc67d66f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bf2c66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000001c0)) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010c0000000300ffffffff00"], 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) [ 2361.721423] FAULT_INJECTION: forcing a failure. [ 2361.721423] name failslab, interval 1, probability 0, space 0, times 0 [ 2361.723256] CPU: 0 PID: 12716 Comm: syz-executor.0 Not tainted 5.10.224 #1 [ 2361.723946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2361.724724] Call Trace: [ 2361.724979] dump_stack+0x107/0x167 [ 2361.725331] should_fail.cold+0x5/0xa [ 2361.725714] ? create_object.isra.0+0x3a/0xa20 [ 2361.726145] should_failslab+0x5/0x20 [ 2361.726526] kmem_cache_alloc+0x5b/0x310 [ 2361.726920] create_object.isra.0+0x3a/0xa20 [ 2361.727347] kmemleak_alloc_percpu+0xa0/0x100 [ 2361.727823] pcpu_alloc+0x4e2/0x1240 [ 2361.728809] alloc_vfsmnt+0xfd/0x680 [ 2361.729790] clone_mnt+0x6c/0xce0 [ 2361.730710] copy_tree+0x3b0/0xa60 [ 2361.731628] copy_mnt_ns+0x144/0xa00 [ 2361.732576] ? kmem_cache_alloc+0x2a6/0x310 [ 2361.733689] create_new_namespaces+0xd6/0xb20 [ 2361.734847] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2361.736107] ksys_unshare+0x449/0x8a0 [ 2361.737085] ? unshare_fd+0x1c0/0x1c0 [ 2361.738058] ? fput_many+0x2f/0x1a0 [ 2361.739001] ? ksys_write+0x1a9/0x260 [ 2361.740000] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2361.741330] __x64_sys_unshare+0x2d/0x40 [ 2361.742363] do_syscall_64+0x33/0x40 [ 2361.743324] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2361.744675] RIP: 0033:0x7f8f4fbc7b19 [ 2361.745591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2361.750236] RSP: 002b:00007f8f4d13d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2361.752148] RAX: ffffffffffffffda RBX: 00007f8f4fcdaf60 RCX: 00007f8f4fbc7b19 [ 2361.753829] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2361.755640] RBP: 00007f8f4d13d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2361.757492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2361.759315] R13: 00007ffca876f03f R14: 00007f8f4d13d300 R15: 0000000000022000 06:25:28 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x8100, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) ioctl$sock_bt_hci(r2, 0x800448f0, &(0x7f0000000380)="0a2d2da2ef9ee479574e35e3ba64f870fe3898f364eddd8079caf5ae0616dffb698891ce445201982337c5a5bfa42703a314a7f82c9295b30351c6a696d1a7e173ab9cc9af1c5006e0044025e8868a8d1a199d7ed9857476d24dd0f9aa64d4fd35d60e125a3fe8970087fa53f87140bc6771deee3d032144161692536e78de9d5e7ea9018b4c8a352844ade27c0b847b013a69fb35e31382d99427d343e6b914ae7bca84796baedf2aa518fd74886f04d6f48ec7fdc5a1dcb9f193b46a2095f9b8c382aad5ae8afebdc22c157d85110db667e0c10dc6eabec0331261c3337731c637") ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r3, &(0x7f0000000080)='attr\x00') fcntl$setownex(r1, 0xf, &(0x7f00000001c0)={0x0, r3}) read(r0, &(0x7f0000000080)=""/65, 0x41) 06:25:28 executing program 3: timer_delete(0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000480)={{r1, r2+60000000}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000100)={{0x0, 0x3938700}}, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r3, &(0x7f0000000080)=""/65, 0x41) [ 2361.905146] FAULT_INJECTION: forcing a failure. [ 2361.905146] name failslab, interval 1, probability 0, space 0, times 0 [ 2361.906611] CPU: 1 PID: 12710 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2361.907454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2361.908535] Call Trace: [ 2361.908818] dump_stack+0x107/0x167 [ 2361.909252] should_fail.cold+0x5/0xa [ 2361.909972] ? create_object.isra.0+0x3a/0xa20 [ 2361.910927] should_failslab+0x5/0x20 [ 2361.911737] kmem_cache_alloc+0x5b/0x310 [ 2361.912795] create_object.isra.0+0x3a/0xa20 [ 2361.913894] kmemleak_alloc_percpu+0xa0/0x100 [ 2361.914957] pcpu_alloc+0x4e2/0x1240 [ 2361.915863] alloc_vfsmnt+0xfd/0x680 [ 2361.916818] clone_mnt+0x6c/0xce0 [ 2361.917709] copy_tree+0x3b0/0xa60 [ 2361.918619] copy_mnt_ns+0x144/0xa00 [ 2361.919563] ? kmem_cache_alloc+0x2a6/0x310 [ 2361.920696] create_new_namespaces+0xd6/0xb20 [ 2361.921869] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2361.923030] ksys_unshare+0x449/0x8a0 [ 2361.924056] ? unshare_fd+0x1c0/0x1c0 [ 2361.925065] ? fput_many+0x2f/0x1a0 [ 2361.926029] ? ksys_write+0x1a9/0x260 [ 2361.926056] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2361.926074] __x64_sys_unshare+0x2d/0x40 [ 2361.926086] do_syscall_64+0x33/0x40 [ 2361.926100] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2361.926110] RIP: 0033:0x7f6b112f9b19 [ 2361.926124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2361.926131] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2361.926146] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 [ 2361.926202] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2361.926212] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2361.926220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2361.926228] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 06:25:28 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xffffffd0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) 06:25:28 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x541) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:25:28 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0002000300ffffffff00"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) 06:25:28 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 77) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:25:28 executing program 3: timer_create(0x1, &(0x7f0000000180)={0x0, 0x4, 0x1, @thr={&(0x7f00000002c0)="2e4d27b1ed26baf68c5463d578e9818286fdda38f2f0b90cabac447cd648c600508f4ae35e0e506ee40393bef0f1315e390a95729c09564e2010a43de6e8ebadb5ab87fafbd1b66ca5f01d4975d7961bbee7e8e5ceddb5e27ecd9e2019", &(0x7f0000000340)="9b167464441610cb6c54362e3a52b1b0d9636f9fe03c8ca14560f1978efbe9791e641928fb74b133106c05a246b5ff52302bc7feb1dfbb88fa9cedf24dee2deba26f17441e66b713e91a6b225e56d768866ef65f21c10840f596736b9bb997757f378c9d745452a45a9c49178e42d28be55b3805a7c2f84051c4df7d0687d9a3cddc2ef607733616f2468b4ffbf38290d9852473dcdf43c0eecc9cb140d5594b64b7fbe624fed3dccbf3482f1f129b0edda299b2b0db547d10e918cfecdad6a282d7"}}, &(0x7f0000000240)=0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x8, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000200)=0x0) timer_delete(r1) timer_gettime(r0, &(0x7f0000000440)) timer_create(0x3, &(0x7f0000000100)={0x0, 0x5, 0x4}, &(0x7f0000000140)=0x0) timer_create(0x1, &(0x7f0000000180)={0x0, 0x4, 0x1, @thr={&(0x7f00000002c0)="2e4d27b1ed26baf68c5463d578e9818286fdda38f2f0b90cabac447cd648c600508f4ae35e0e506ee40393bef0f1315e390a95729c09564e2010a43de6e8ebadb5ab87fafbd1b66ca5f01d4975d7961bbee7e8e5ceddb5e27ecd9e2019", &(0x7f0000000340)="9b167464441610cb6c54362e3a52b1b0d9636f9fe03c8ca14560f1978efbe9791e641928fb74b133106c05a246b5ff52302bc7feb1dfbb88fa9cedf24dee2deba26f17441e66b713e91a6b225e56d768866ef65f21c10840f596736b9bb997757f378c9d745452a45a9c49178e42d28be55b3805a7c2f84051c4df7d0687d9a3cddc2ef607733616f2468b4ffbf38290d9852473dcdf43c0eecc9cb140d5594b64b7fbe624fed3dccbf3482f1f129b0edda299b2b0db547d10e918cfecdad6a282d7"}}, &(0x7f0000000240)=0x0) timer_gettime(r3, &(0x7f0000000440)) timer_delete(r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r4, &(0x7f0000000080)=""/65, 0x41) [ 2362.363528] FAULT_INJECTION: forcing a failure. [ 2362.363528] name failslab, interval 1, probability 0, space 0, times 0 [ 2362.366382] CPU: 1 PID: 12757 Comm: syz-executor.0 Not tainted 5.10.224 #1 [ 2362.368033] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2362.370025] Call Trace: [ 2362.370678] dump_stack+0x107/0x167 [ 2362.371495] should_fail.cold+0x5/0xa [ 2362.372404] ? alloc_vfsmnt+0x23/0x680 06:25:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x420}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x4810ada4}}]}}) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x24, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r5, r6) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x13, r7, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x1, 0x0, 0x6, 0x5, 0x0, 0x2, 0x422, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x7, 0x1}, 0x8005, 0x2, 0x0, 0x2, 0x4889, 0x3, 0x7b, 0x0, 0xffff8000, 0x0, 0xfffffffffffffff7}, 0x0, 0xf, r7, 0x1) [ 2362.373324] should_failslab+0x5/0x20 [ 2362.374512] kmem_cache_alloc+0x5b/0x310 [ 2362.375554] ? copy_tree+0x61a/0xa60 [ 2362.376493] alloc_vfsmnt+0x23/0x680 [ 2362.377423] clone_mnt+0x6c/0xce0 [ 2362.378235] copy_tree+0x3b0/0xa60 [ 2362.379107] copy_mnt_ns+0x144/0xa00 [ 2362.380074] ? kmem_cache_alloc+0x2a6/0x310 [ 2362.381116] create_new_namespaces+0xd6/0xb20 [ 2362.382201] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2362.383392] ksys_unshare+0x449/0x8a0 [ 2362.384336] ? unshare_fd+0x1c0/0x1c0 [ 2362.385278] ? fput_many+0x2f/0x1a0 [ 2362.386159] ? ksys_write+0x1a9/0x260 [ 2362.387113] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2362.388572] __x64_sys_unshare+0x2d/0x40 [ 2362.389569] do_syscall_64+0x33/0x40 [ 2362.390490] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2362.391782] RIP: 0033:0x7f8f4fbc7b19 [ 2362.392713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2362.397453] RSP: 002b:00007f8f4d13d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2362.399336] RAX: ffffffffffffffda RBX: 00007f8f4fcdaf60 RCX: 00007f8f4fbc7b19 [ 2362.401249] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2362.402947] RBP: 00007f8f4d13d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2362.404782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2362.406561] R13: 00007ffca876f03f R14: 00007f8f4d13d300 R15: 0000000000022000 06:25:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) dup2(r0, 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x9f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9400010000000000ffbcec1bf8d83c5984c9fec934453b508d00ffffffff00"], 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) 06:25:29 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) 06:25:29 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 70) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2362.510444] FAULT_INJECTION: forcing a failure. [ 2362.510444] name failslab, interval 1, probability 0, space 0, times 0 [ 2362.511761] CPU: 0 PID: 12767 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2362.512525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2362.513438] Call Trace: [ 2362.513719] dump_stack+0x107/0x167 [ 2362.514097] should_fail.cold+0x5/0xa [ 2362.514561] ? create_object.isra.0+0x3a/0xa20 [ 2362.517604] should_failslab+0x5/0x20 [ 2362.518004] kmem_cache_alloc+0x5b/0x310 [ 2362.518523] ? mark_held_locks+0x9e/0xe0 [ 2362.518959] create_object.isra.0+0x3a/0xa20 [ 2362.519655] kmemleak_alloc_percpu+0xa0/0x100 [ 2362.520132] pcpu_alloc+0x4e2/0x1240 [ 2362.520580] alloc_vfsmnt+0xfd/0x680 [ 2362.520984] clone_mnt+0x6c/0xce0 [ 2362.521395] copy_tree+0x3b0/0xa60 [ 2362.521787] copy_mnt_ns+0x144/0xa00 [ 2362.522243] ? kmem_cache_alloc+0x2a6/0x310 [ 2362.522699] create_new_namespaces+0xd6/0xb20 [ 2362.523225] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2362.523742] ksys_unshare+0x449/0x8a0 [ 2362.524195] ? unshare_fd+0x1c0/0x1c0 [ 2362.524598] ? fput_many+0x2f/0x1a0 [ 2362.525003] ? ksys_write+0x1a9/0x260 [ 2362.525459] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2362.526025] __x64_sys_unshare+0x2d/0x40 [ 2362.526520] do_syscall_64+0x33/0x40 [ 2362.526906] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2362.527491] RIP: 0033:0x7f6b112f9b19 [ 2362.527885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2362.529861] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2362.530699] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 [ 2362.531505] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2362.532288] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2362.533023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2362.533810] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 06:25:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x6c7) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:25:29 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x6c4) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:25:44 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) 06:25:44 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x543) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:25:44 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x6c7) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:25:44 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 78) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:25:44 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 71) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2377.600607] FAULT_INJECTION: forcing a failure. [ 2377.600607] name failslab, interval 1, probability 0, space 0, times 0 [ 2377.601730] CPU: 0 PID: 12801 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2377.602348] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2377.603091] Call Trace: [ 2377.603347] dump_stack+0x107/0x167 06:25:44 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x2, 'veth0_to_bond\x00', {0x8}, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) timer_create(0x1, &(0x7f0000000180)={0x0, 0x4, 0x1, @thr={&(0x7f00000002c0)="2e4d27b1ed26baf68c5463d578e9818286fdda38f2f0b90cabac447cd648c600508f4ae35e0e506ee40393bef0f1315e390a95729c09564e2010a43de6e8ebadb5ab87fafbd1b66ca5f01d4975d7961bbee7e8e5ceddb5e27ecd9e2019", &(0x7f0000000340)="9b167464441610cb6c54362e3a52b1b0d9636f9fe03c8ca14560f1978efbe9791e641928fb74b133106c05a246b5ff52302bc7feb1dfbb88fa9cedf24dee2deba26f17441e66b713e91a6b225e56d768866ef65f21c10840f596736b9bb997757f378c9d745452a45a9c49178e42d28be55b3805a7c2f84051c4df7d0687d9a3cddc2ef607733616f2468b4ffbf38290d9852473dcdf43c0eecc9cb140d5594b64b7fbe624fed3dccbf3482f1f129b0edda299b2b0db547d10e918cfecdad6a282d7"}}, &(0x7f0000000240)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000004, 0x13, 0xffffffffffffffff, 0x0) timer_gettime(r1, &(0x7f0000000440)) timer_settime(r1, 0x1, &(0x7f0000000140)={{}, {0x77359400}}, &(0x7f00000001c0)) read(r0, &(0x7f0000000080)=""/65, 0x41) 06:25:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x6e8) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:25:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000340)=0x10, 0x80000) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f00000014c0)={0x0, 0x4, 0x4, 0x1}) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000120000012cbd7000fbdbdf25fe800000000000010000000000000025000004d20a002b0005001900ff000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2377.603688] should_fail.cold+0x5/0xa [ 2377.604070] ? alloc_vfsmnt+0x23/0x680 [ 2377.604438] should_failslab+0x5/0x20 [ 2377.604793] kmem_cache_alloc+0x5b/0x310 [ 2377.605172] ? copy_tree+0x61a/0xa60 [ 2377.605654] alloc_vfsmnt+0x23/0x680 [ 2377.606003] clone_mnt+0x6c/0xce0 [ 2377.606330] copy_tree+0x3b0/0xa60 [ 2377.606668] copy_mnt_ns+0x144/0xa00 [ 2377.607021] ? kmem_cache_alloc+0x2a6/0x310 [ 2377.607430] create_new_namespaces+0xd6/0xb20 [ 2377.607856] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2377.608314] ksys_unshare+0x449/0x8a0 [ 2377.608636] ? unshare_fd+0x1c0/0x1c0 [ 2377.608955] ? fput_many+0x2f/0x1a0 [ 2377.609293] ? ksys_write+0x1a9/0x260 [ 2377.609656] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2377.610134] __x64_sys_unshare+0x2d/0x40 [ 2377.610509] do_syscall_64+0x33/0x40 [ 2377.610861] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2377.611320] RIP: 0033:0x7f6b112f9b19 [ 2377.611660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2377.613293] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2377.613975] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 [ 2377.614615] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2377.615249] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2377.615888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2377.616538] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 [ 2377.621419] FAULT_INJECTION: forcing a failure. [ 2377.621419] name failslab, interval 1, probability 0, space 0, times 0 [ 2377.622493] CPU: 1 PID: 12796 Comm: syz-executor.0 Not tainted 5.10.224 #1 [ 2377.623128] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2377.623857] Call Trace: [ 2377.624120] dump_stack+0x107/0x167 [ 2377.624449] should_fail.cold+0x5/0xa [ 2377.624797] ? create_object.isra.0+0x3a/0xa20 [ 2377.625227] should_failslab+0x5/0x20 [ 2377.625570] kmem_cache_alloc+0x5b/0x310 [ 2377.625942] ? find_held_lock+0x2c/0x110 [ 2377.626328] create_object.isra.0+0x3a/0xa20 [ 2377.626726] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2377.627202] kmem_cache_alloc+0x159/0x310 [ 2377.627580] alloc_vfsmnt+0x23/0x680 [ 2377.627920] clone_mnt+0x6c/0xce0 [ 2377.628275] copy_tree+0x3b0/0xa60 [ 2377.628606] copy_mnt_ns+0x144/0xa00 [ 2377.628948] ? kmem_cache_alloc+0x2a6/0x310 [ 2377.629359] create_new_namespaces+0xd6/0xb20 [ 2377.629771] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2377.630211] ksys_unshare+0x449/0x8a0 [ 2377.630575] ? unshare_fd+0x1c0/0x1c0 [ 2377.630920] ? fput_many+0x2f/0x1a0 [ 2377.631255] ? ksys_write+0x1a9/0x260 [ 2377.631628] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2377.632121] __x64_sys_unshare+0x2d/0x40 [ 2377.632509] do_syscall_64+0x33/0x40 [ 2377.632853] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2377.633278] RIP: 0033:0x7f8f4fbc7b19 [ 2377.633620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2377.635263] RSP: 002b:00007f8f4d13d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2377.635970] RAX: ffffffffffffffda RBX: 00007f8f4fcdaf60 RCX: 00007f8f4fbc7b19 [ 2377.636602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2377.637265] RBP: 00007f8f4d13d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2377.637926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2377.638566] R13: 00007ffca876f03f R14: 00007f8f4d13d300 R15: 0000000000022000 06:25:44 executing program 3: timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f00000002c0)="cce417b1cc966c3992b3a86e2bb6669a34ed2ea0b44b8c087741e04bb3510a7b29d17405aef796ae98f2abfd62c707cdb6b902458eb203b99dc2a36451f93ed0deab8e15ce84bc6da331998aee05dab1b59ea106ff1e354afe9d67b0b40edd699f7fc0f44a08e56e3a950aca7cecfa758b90c151a64703f279297608d87eef9c9a7eb3d65c1931128da28b11d5e04a5fca04225808f03900ed2dc439a9d8875c6617c53a0c08ad1acfc477241ff082463abf8b73811af56203fa2b5ae265bf6ec921d767e13c60dae5602430e4c6766838e1c3f925b725f399", 0xd9, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) 06:25:44 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 72) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2377.776944] FAULT_INJECTION: forcing a failure. [ 2377.776944] name failslab, interval 1, probability 0, space 0, times 0 [ 2377.778163] CPU: 0 PID: 12823 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2377.778806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2377.779540] Call Trace: [ 2377.779812] dump_stack+0x107/0x167 [ 2377.780162] should_fail.cold+0x5/0xa [ 2377.780517] ? create_object.isra.0+0x3a/0xa20 [ 2377.780959] should_failslab+0x5/0x20 [ 2377.781313] kmem_cache_alloc+0x5b/0x310 [ 2377.781690] ? find_held_lock+0x2c/0x110 [ 2377.782085] create_object.isra.0+0x3a/0xa20 [ 2377.782488] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2377.782970] kmem_cache_alloc+0x159/0x310 [ 2377.783362] alloc_vfsmnt+0x23/0x680 [ 2377.783708] clone_mnt+0x6c/0xce0 [ 2377.784073] copy_tree+0x3b0/0xa60 [ 2377.784412] copy_mnt_ns+0x144/0xa00 [ 2377.784761] ? kmem_cache_alloc+0x2a6/0x310 [ 2377.785189] create_new_namespaces+0xd6/0xb20 [ 2377.785610] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2377.786084] ksys_unshare+0x449/0x8a0 [ 2377.786441] ? unshare_fd+0x1c0/0x1c0 [ 2377.786793] ? fput_many+0x2f/0x1a0 [ 2377.787151] ? ksys_write+0x1a9/0x260 [ 2377.787517] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2377.788013] __x64_sys_unshare+0x2d/0x40 [ 2377.788395] do_syscall_64+0x33/0x40 [ 2377.788721] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2377.789170] RIP: 0033:0x7f6b112f9b19 [ 2377.789521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2377.791115] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2377.791789] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 [ 2377.792479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2377.793122] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2377.793784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2377.794434] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 06:25:44 executing program 3: timer_delete(0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x41, 0x6, @thr={&(0x7f00000002c0)="0017f31eee915eb65bdfd876d44aff435b44c7e5a4e2866d207ca953cf1e62c740ce95819bf5529b0c2a2c780f8adda81fa96b73162545d193fc8cc3491878357fa8f4273b3c7abbf40a13441f92ab3276cc00e619c45a2d4f34c5faacf60efdfa778adedb57e4dab172ecd5bc993c4c09c6588c6ef7e438169d9cdc2b9510a26609b3db5fb51f1d20a7c6bb16b996e3ab16b7e96210f12877689047dad443b8be634db4f4ae0426e4254a5850ff7db454a36e89ac909a9590145ede9729ad7f3db27b87138f24668d70c1df46888a5d5d2a96ecd4f7", &(0x7f00000001c0)="a6a7c91dc79dafc0e286102e7f6f4523a6010c2c0b3c5e6eedcb89c652d6aa97740f6a5c1f2339169c77d88bedece2e77fe2240869289f0a455243ab29f5f26cb70c003f14520702b1a96e5ecd38cf54cb0baf3d7e44c4241b1fbb88194c501effcb17afb7ccbf8a21154c45f2e196f25cb5e09c16fc90e64c3e6160ceef222a1fc079de537fd9d32b178dee91053b790385d075d5c88203a9"}}, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x8, 0x1}, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000c40)={0x1, 0x80, 0x1, 0xf7, 0x5, 0x1, 0x0, 0x7, 0x400, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f2, 0x0, @perf_config_ext={0x3ff, 0x8}, 0x50000, 0x2, 0x1, 0x3, 0x6, 0x0, 0x9, 0x0, 0x20, 0x0, 0x9}, 0x0, 0x7, 0xffffffffffffffff, 0x6) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f00000003c0)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, &(0x7f0000000900)) timer_create(0x5, &(0x7f0000000940)={0x0, 0x3f}, &(0x7f0000000980)=0x0) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000a40)={{r2, r3+60000000}, {r4, r5+60000000}}, &(0x7f0000000a80)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="bc0000001b00020025bd7000ffdbdf250500000043ae4fe26ce86ec4d16e8a801de28c6c2140fa3b204ee5f0297a7267c9012b226d2c9280828bca3f75c52c9f9b1503573d93f910611f6d4b2106fc9df3301627d6a4146c992c78c6491dc068da50a3781a16c66768ced509edcfdc143f2f3264c6da7831305c90fca18a7a9b48b46ffe6deb71410c0090000080000000000000140057000000000000ff0f000000ffffe000000114003f00ff020000000000000000000000ddff01"], 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x240080c0) timer_create(0x3, &(0x7f0000000840)={0x0, 0x2b, 0x0, @thr={&(0x7f0000000740)="11b68c0f6c0ad8e9f6dfdb832a57675c759536941323f56d55c82a54e4950551575ca132b83e0d3d5843726b236427061806e471389fc02683ee24351fb6ce11a332ec13c874480b136c8bc460efa444fd4da7e9219078f3ae171cc1f4bdedd673ebad15809fb01c5537da47378e65935e77af50058da52bd149ecde8d5c3aa6c291a787c25eaedfe97d31bb40111098bb90c935605b1dfb2e1609618a22072b65a41349e8202a4da496b167b14bc9a93b0ae4232a178a8d4e55d599b840da5885c8b136db4510e3674840b0d47d82de7ea503d7273141827204f11188c80708c2e2d3244b97382a1c9d7ee9e37d77b0ebda2b38615221", &(0x7f0000000400)="2cf27b6f744b484dda2d581b8e09e9"}}, &(0x7f0000000880)=0x0) timer_gettime(r7, &(0x7f00000008c0)) timer_create(0x7, &(0x7f0000000040)={0x0, 0x7, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000180)) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) read(r6, &(0x7f0000000080)=""/65, 0x41) 06:25:44 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 79) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:25:44 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) timer_create(0x1, &(0x7f0000000180)={0x0, 0x4, 0x1, @thr={&(0x7f00000002c0)="2e4d27b1ed26baf68c5463d578e9818286fdda38f2f0b90cabac447cd648c600508f4ae35e0e506ee40393bef0f1315e390a95729c09564e2010a43de6e8ebadb5ab87fafbd1b66ca5f01d4975d7961bbee7e8e5ceddb5e27ecd9e2019", &(0x7f0000000340)="9b167464441610cb6c54362e3a52b1b0d9636f9fe03c8ca14560f1978efbe9791e641928fb74b133106c05a246b5ff52302bc7feb1dfbb88fa9cedf24dee2deba26f17441e66b713e91a6b225e56d768866ef65f21c10840f596736b9bb997757f378c9d745452a45a9c49178e42d28be55b3805a7c2f84051c4df7d0687d9a3cddc2ef607733616f2468b4ffbf38290d9852473dcdf43c0eecc9cb140d5594b64b7fbe624fed3dccbf3482f1f129b0edda299b2b0db547d10e918cfecdad6a282d7"}}, &(0x7f0000000240)=0x0) timer_gettime(r0, &(0x7f0000000440)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f00000001c0)={{0x77359400}, {r1, r2+10000000}}, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r3, &(0x7f0000000080)=""/65, 0x41) [ 2377.958359] FAULT_INJECTION: forcing a failure. [ 2377.958359] name failslab, interval 1, probability 0, space 0, times 0 [ 2377.959464] CPU: 0 PID: 12833 Comm: syz-executor.0 Not tainted 5.10.224 #1 [ 2377.960099] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2377.960850] Call Trace: [ 2377.961103] dump_stack+0x107/0x167 [ 2377.961451] should_fail.cold+0x5/0xa [ 2377.961817] should_failslab+0x5/0x20 [ 2377.962172] __kmalloc_track_caller+0x79/0x370 [ 2377.962608] ? kstrdup_const+0x53/0x80 [ 2377.962973] kstrdup+0x36/0x70 [ 2377.963274] kstrdup_const+0x53/0x80 [ 2377.963633] alloc_vfsmnt+0xb5/0x680 [ 2377.963989] clone_mnt+0x6c/0xce0 [ 2377.964323] copy_tree+0x3b0/0xa60 [ 2377.964670] copy_mnt_ns+0x144/0xa00 [ 2377.965013] ? kmem_cache_alloc+0x2a6/0x310 [ 2377.965412] create_new_namespaces+0xd6/0xb20 [ 2377.965840] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2377.966286] ksys_unshare+0x449/0x8a0 [ 2377.966645] ? unshare_fd+0x1c0/0x1c0 [ 2377.966988] ? fput_many+0x2f/0x1a0 [ 2377.967324] ? ksys_write+0x1a9/0x260 [ 2377.967698] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2377.968189] __x64_sys_unshare+0x2d/0x40 [ 2377.968559] do_syscall_64+0x33/0x40 [ 2377.968926] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2377.969380] RIP: 0033:0x7f8f4fbc7b19 [ 2377.969723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2377.971385] RSP: 002b:00007f8f4d13d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2377.972128] RAX: ffffffffffffffda RBX: 00007f8f4fcdaf60 RCX: 00007f8f4fbc7b19 [ 2377.972138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2377.972146] RBP: 00007f8f4d13d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2377.972155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2377.972164] R13: 00007ffca876f03f R14: 00007f8f4d13d300 R15: 0000000000022000 06:25:44 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 80) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:25:44 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x81, 0x7f, 0x5, 0x9, 0x0, 0xde, 0x10400, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3e7, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x41088, 0x8000, 0xffffffff, 0x4, 0x6, 0xff, 0x4, 0x0, 0x3, 0x0, 0x200}, 0x0, 0x8, 0xffffffffffffffff, 0xf) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001600990d0000000300ffffffff004031c605b39a7c86057ebbb28122c565e3ae399c8fc9d016d1a7af8cdd90b5e7bd087c852e9f24da3f9bd27cbd3b6f82f0b17eb0610ee791f7d48c4e4afede4b554551c12036b8598b1c1c9dc7236a70d6a640d07e07cc2e3f777b81b1acc0d99f251f623f9602ca1dc8c47c026df179906733edddef2f6a416247002bf87bc4d5abef0584d4887d99e19509feaffda447a6064d42dcfbcc038d30cb04be18e754ca"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) 06:25:44 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 73) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:25:44 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x564) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:25:44 executing program 1: stat(&(0x7f00000037c0)='./file0\x00', &(0x7f0000003800)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x80800) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) readv(r3, &(0x7f0000000440)=[{&(0x7f00000027c0)=""/259, 0x103}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000003880)=""/237, 0xed}, {&(0x7f0000000400)=""/23, 0x17}, {&(0x7f00000026c0)=""/234, 0xea}, {&(0x7f0000003980)=""/4096, 0x1000}], 0x6) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {0xffffffffffffffff, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r7 = dup2(r5, r6) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x200}, 0x31, &(0x7f00000002c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="30400000120004bf445174454b002cbd7000fbdbdf25ac1e01010000950000000000000000000004d20a004400050000f6d1cedb3d6dacb0dbc04003c72f6805c68d3ea4803a631f3a5c1493a26101586112ed1bc00e4d6e30c11abf288c86c4e10ef64064f9791c12f500823bf303082a68fca99de34c86721d525705e8bec2edd5617743047de46900a6a5988b4c7870dc976ebf4bbd17fbc99521903536a53dc38e5ee4154dc3068c2470777a85e608b4393dc83379f174aad7a9104ad158dfca94413f3e7683a1c5d27cc0eb66b572f1e32b1e1879aadfeeca892707be00"/236], 0x30}, 0x1, 0x0, 0x0, 0x20044001}, 0x6c4333d6e6cd7f20) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000002900)=ANY=[@ANYRES16=r0, @ANYBLOB="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"]) r8 = syz_open_dev$vcsa(&(0x7f0000000000), 0x100000000, 0x210000) ioctl$TIOCGLCKTRMIOS(r8, 0x5456, &(0x7f0000000080)={0x0, 0xffffffc0, 0x2, 0x2, 0x16, "73c78cf21ca64fd0f1e7c941228c3015855d37"}) [ 2378.170220] FAULT_INJECTION: forcing a failure. [ 2378.170220] name failslab, interval 1, probability 0, space 0, times 0 [ 2378.170239] CPU: 0 PID: 12841 Comm: syz-executor.0 Not tainted 5.10.224 #1 [ 2378.170247] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2378.170253] Call Trace: [ 2378.170274] dump_stack+0x107/0x167 [ 2378.170290] should_fail.cold+0x5/0xa [ 2378.170310] ? create_object.isra.0+0x3a/0xa20 [ 2378.170333] should_failslab+0x5/0x20 [ 2378.170352] kmem_cache_alloc+0x5b/0x310 [ 2378.170371] create_object.isra.0+0x3a/0xa20 [ 2378.170387] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2378.170407] __kmalloc_track_caller+0x177/0x370 [ 2378.170429] ? kstrdup_const+0x53/0x80 [ 2378.170447] kstrdup+0x36/0x70 [ 2378.170464] kstrdup_const+0x53/0x80 [ 2378.170483] alloc_vfsmnt+0xb5/0x680 [ 2378.170506] clone_mnt+0x6c/0xce0 [ 2378.170528] copy_tree+0x3b0/0xa60 [ 2378.170552] copy_mnt_ns+0x144/0xa00 [ 2378.170569] ? kmem_cache_alloc+0x2a6/0x310 [ 2378.170591] create_new_namespaces+0xd6/0xb20 [ 2378.170614] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2378.170634] ksys_unshare+0x449/0x8a0 [ 2378.170647] ? unshare_fd+0x1c0/0x1c0 [ 2378.170659] ? fput_many+0x2f/0x1a0 [ 2378.170677] ? ksys_write+0x1a9/0x260 [ 2378.170703] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2378.170722] __x64_sys_unshare+0x2d/0x40 [ 2378.170736] do_syscall_64+0x33/0x40 [ 2378.170752] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2378.170761] RIP: 0033:0x7f8f4fbc7b19 [ 2378.170777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2378.170785] RSP: 002b:00007f8f4d13d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2378.170802] RAX: ffffffffffffffda RBX: 00007f8f4fcdaf60 RCX: 00007f8f4fbc7b19 [ 2378.170810] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2378.170818] RBP: 00007f8f4d13d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2378.170827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2378.170836] R13: 00007ffca876f03f R14: 00007f8f4d13d300 R15: 0000000000022000 [ 2378.234648] FAULT_INJECTION: forcing a failure. [ 2378.234648] name failslab, interval 1, probability 0, space 0, times 0 [ 2378.234683] CPU: 1 PID: 12851 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2378.234690] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2378.234693] Call Trace: [ 2378.234713] dump_stack+0x107/0x167 [ 2378.234727] should_fail.cold+0x5/0xa [ 2378.234752] should_failslab+0x5/0x20 [ 2378.234772] __kmalloc_track_caller+0x79/0x370 [ 2378.234791] ? kstrdup_const+0x53/0x80 [ 2378.234806] kstrdup+0x36/0x70 [ 2378.234818] kstrdup_const+0x53/0x80 [ 2378.234835] alloc_vfsmnt+0xb5/0x680 [ 2378.234852] clone_mnt+0x6c/0xce0 [ 2378.234871] copy_tree+0x3b0/0xa60 [ 2378.234895] copy_mnt_ns+0x144/0xa00 [ 2378.234911] ? kmem_cache_alloc+0x2a6/0x310 [ 2378.234933] create_new_namespaces+0xd6/0xb20 [ 2378.234956] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2378.234980] ksys_unshare+0x449/0x8a0 [ 2378.234992] ? unshare_fd+0x1c0/0x1c0 [ 2378.235004] ? fput_many+0x2f/0x1a0 [ 2378.235023] ? ksys_write+0x1a9/0x260 [ 2378.235052] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2378.235072] __x64_sys_unshare+0x2d/0x40 [ 2378.235085] do_syscall_64+0x33/0x40 [ 2378.235100] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2378.235110] RIP: 0033:0x7f6b112f9b19 [ 2378.235124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2378.235132] RSP: 002b:00007f6b0e84e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2378.235149] RAX: ffffffffffffffda RBX: 00007f6b1140d020 RCX: 00007f6b112f9b19 [ 2378.235155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2378.235162] RBP: 00007f6b0e84e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2378.235169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2378.235176] R13: 00007ffd6618d60f R14: 00007f6b0e84e300 R15: 0000000000022000 06:25:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="04", 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x0, 0xfffffffc, 0x7ff, 0xed4, 0x6, "ce91d20e528a547126f043b11e6349a28ed581", 0x40, 0x5}) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) ioctl$KDSETLED(r0, 0x4b32, 0xf655) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:25:59 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x6ea) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:25:59 executing program 3: timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x20, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) ioctl$sock_bt_hci(r2, 0x800448f0, &(0x7f0000000380)="0a2d2da2ef9ee479574e35e3ba64f870fe3898f364eddd8079caf5ae0616dffb698891ce445201982337c5a5bfa42703a314a7f82c9295b30351c6a696d1a7e173ab9cc9af1c5006e0044025e8868a8d1a199d7ed9857476d24dd0f9aa64d4fd35d60e125a3fe8970087fa53f87140bc6771deee3d032144161692536e78de9d5e7ea9018b4c8a352844ade27c0b847b013a69fb35e31382d99427d343e6b914ae7bca84796baedf2aa518fd74886f04d6f48ec7fdc5a1dcb9f193b46a2095f9b8c382aad5ae8afebdc22c157d85110db667e0c10dc6eabec0331261c3337731c637") ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r3, &(0x7f0000000080)='attr\x00') perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x1f, 0x4, 0xd, 0xff, 0x0, 0x4, 0x200, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffeff, 0x4, @perf_config_ext={0x15b, 0x3}, 0x202, 0xfffffffffffffffd, 0x5, 0x9, 0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, r3, 0x1, r0, 0x1) timer_settime(r1, 0x1, &(0x7f0000000140)={{}, {0x77359400}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) read(r4, &(0x7f0000000080)=""/65, 0x41) 06:25:59 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 81) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2392.894168] FAULT_INJECTION: forcing a failure. [ 2392.894168] name failslab, interval 1, probability 0, space 0, times 0 [ 2392.895296] CPU: 0 PID: 12873 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2392.895940] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2392.896719] Call Trace: [ 2392.896979] dump_stack+0x107/0x167 [ 2392.897323] should_fail.cold+0x5/0xa [ 2392.897690] ? create_object.isra.0+0x3a/0xa20 [ 2392.898104] should_failslab+0x5/0x20 [ 2392.898437] kmem_cache_alloc+0x5b/0x310 [ 2392.898788] create_object.isra.0+0x3a/0xa20 [ 2392.899167] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2392.899606] __kmalloc_track_caller+0x177/0x370 [ 2392.900031] ? kstrdup_const+0x53/0x80 [ 2392.900412] kstrdup+0x36/0x70 [ 2392.900722] kstrdup_const+0x53/0x80 [ 2392.901072] alloc_vfsmnt+0xb5/0x680 [ 2392.901419] clone_mnt+0x6c/0xce0 [ 2392.901741] copy_tree+0x3b0/0xa60 [ 2392.902084] copy_mnt_ns+0x144/0xa00 [ 2392.902444] ? kmem_cache_alloc+0x2a6/0x310 [ 2392.902844] create_new_namespaces+0xd6/0xb20 [ 2392.903265] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2392.903716] ksys_unshare+0x449/0x8a0 [ 2392.904072] ? unshare_fd+0x1c0/0x1c0 [ 2392.904552] ? fput_many+0x2f/0x1a0 [ 2392.904895] ? ksys_write+0x1a9/0x260 [ 2392.905263] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2392.905755] __x64_sys_unshare+0x2d/0x40 [ 2392.906133] do_syscall_64+0x33/0x40 [ 2392.906484] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2392.906958] RIP: 0033:0x7f6b112f9b19 [ 2392.907304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2392.908982] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2392.909681] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 [ 2392.910333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2392.910984] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2392.911640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2392.912308] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 06:25:59 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x7, 0xffffffffffffffff, 0x1) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400006f1600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/50, 0x32) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x2) 06:25:59 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x6e8) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:25:59 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 74) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:25:59 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x566) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2392.934384] FAULT_INJECTION: forcing a failure. [ 2392.934384] name failslab, interval 1, probability 0, space 0, times 0 [ 2392.935590] CPU: 1 PID: 12869 Comm: syz-executor.0 Not tainted 5.10.224 #1 [ 2392.936298] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2392.937083] Call Trace: [ 2392.937663] dump_stack+0x107/0x167 [ 2392.938006] should_fail.cold+0x5/0xa [ 2392.938431] ? create_object.isra.0+0x3a/0xa20 [ 2392.938878] should_failslab+0x5/0x20 [ 2392.939292] kmem_cache_alloc+0x5b/0x310 [ 2392.939686] create_object.isra.0+0x3a/0xa20 [ 2392.940181] kmemleak_alloc_percpu+0xa0/0x100 [ 2392.940622] pcpu_alloc+0x4e2/0x1240 [ 2392.940993] alloc_vfsmnt+0xfd/0x680 [ 2392.941445] clone_mnt+0x6c/0xce0 [ 2392.941796] copy_tree+0x3b0/0xa60 [ 2392.942145] copy_mnt_ns+0x144/0xa00 [ 2392.942500] ? kmem_cache_alloc+0x2a6/0x310 [ 2392.942908] create_new_namespaces+0xd6/0xb20 [ 2392.943337] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2392.943807] ksys_unshare+0x449/0x8a0 [ 2392.944174] ? unshare_fd+0x1c0/0x1c0 [ 2392.944528] ? fput_many+0x2f/0x1a0 [ 2392.944890] ? ksys_write+0x1a9/0x260 [ 2392.945268] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2392.945755] __x64_sys_unshare+0x2d/0x40 [ 2392.946135] do_syscall_64+0x33/0x40 [ 2392.946485] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2392.946964] RIP: 0033:0x7f8f4fbc7b19 [ 2392.947286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2392.948820] RSP: 002b:00007f8f4d13d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2392.949690] RAX: ffffffffffffffda RBX: 00007f8f4fcdaf60 RCX: 00007f8f4fbc7b19 [ 2392.950414] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2392.951072] RBP: 00007f8f4d13d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2392.951783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2392.952516] R13: 00007ffca876f03f R14: 00007f8f4d13d300 R15: 0000000000022000 06:25:59 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@mcast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f00000004c0)=0xe8) syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x4, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="4c9a90564a9587ecedd5d184261f1d8349d529b02183e739ed3dad79e59de48fac64805ff3a1ba274eec0733d7477721273ee0c7c09159fc81e75229b3820b6bd3b6c77b66497484c59a981bab7be5eafe6bf3362149bb475e1ee040cd43af1c7d3f1beb4b08", 0x66, 0x8}], 0x0, &(0x7f0000000500)={[{@huge_always}, {@huge_within_size}, {@nr_inodes={'nr_inodes', 0x3d, [0x37, 0x67, 0x67, 0x2d]}}, {@huge_advise}, {@huge_advise}, {@nr_blocks={'nr_blocks', 0x3d, [0x6b, 0x37, 0x67, 0x6d, 0x6d]}}, {@huge_always}, {@huge_never}, {@huge_within_size}, {@size={'size', 0x3d, [0x30, 0x6b, 0x38, 0x65, 0x33, 0x32, 0x6b, 0x65, 0x78, 0x6b]}}], [{@smackfsdef={'smackfsdef', 0x3d, 'N/:'}}, {@uid_gt={'uid>', r0}}, {@pcr={'pcr', 0x3d, 0x39}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@audit}]}) timer_create(0x4, &(0x7f0000000100)={0x0, 0x22, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000140)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) 06:25:59 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 75) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2393.070969] tmpfs: Unsupported parameter 'huge' [ 2393.084163] FAULT_INJECTION: forcing a failure. [ 2393.084163] name failslab, interval 1, probability 0, space 0, times 0 [ 2393.086561] CPU: 0 PID: 12892 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2393.088057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2393.089768] Call Trace: [ 2393.090019] dump_stack+0x107/0x167 [ 2393.090356] should_fail.cold+0x5/0xa [ 2393.091186] ? create_object.isra.0+0x3a/0xa20 [ 2393.092110] should_failslab+0x5/0x20 [ 2393.092949] kmem_cache_alloc+0x5b/0x310 [ 2393.093838] create_object.isra.0+0x3a/0xa20 [ 2393.094799] kmemleak_alloc_percpu+0xa0/0x100 [ 2393.095771] pcpu_alloc+0x4e2/0x1240 [ 2393.096596] alloc_vfsmnt+0xfd/0x680 [ 2393.097401] clone_mnt+0x6c/0xce0 [ 2393.098153] copy_tree+0x3b0/0xa60 [ 2393.098929] copy_mnt_ns+0x144/0xa00 [ 2393.099747] ? kmem_cache_alloc+0x2a6/0x310 [ 2393.100693] create_new_namespaces+0xd6/0xb20 [ 2393.101679] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2393.102736] ksys_unshare+0x449/0x8a0 [ 2393.103390] ? unshare_fd+0x1c0/0x1c0 [ 2393.104041] ? fput_many+0x2f/0x1a0 [ 2393.104701] ? ksys_write+0x1a9/0x260 [ 2393.105546] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2393.106703] __x64_sys_unshare+0x2d/0x40 [ 2393.107599] do_syscall_64+0x33/0x40 [ 2393.108426] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2393.109549] RIP: 0033:0x7f6b112f9b19 [ 2393.110356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2393.113010] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2393.113657] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 [ 2393.114256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2393.114857] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2393.115456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2393.116072] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 [ 2393.144287] tmpfs: Unsupported parameter 'huge' 06:25:59 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 82) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:25:59 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x6ea) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:25:59 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x1e40371f87e5339a, &(0x7f0000000100)={0x0, 0x36, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140)) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) 06:25:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000340)=""/211, 0xd3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2d, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2393.213854] FAULT_INJECTION: forcing a failure. [ 2393.213854] name failslab, interval 1, probability 0, space 0, times 0 [ 2393.213875] CPU: 1 PID: 12904 Comm: syz-executor.0 Not tainted 5.10.224 #1 06:25:59 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 76) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2393.213886] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2393.213891] Call Trace: [ 2393.213913] dump_stack+0x107/0x167 [ 2393.213931] should_fail.cold+0x5/0xa [ 2393.213951] ? create_object.isra.0+0x3a/0xa20 [ 2393.213976] should_failslab+0x5/0x20 [ 2393.213996] kmem_cache_alloc+0x5b/0x310 [ 2393.214014] create_object.isra.0+0x3a/0xa20 [ 2393.214039] kmemleak_alloc_percpu+0xa0/0x100 [ 2393.214059] pcpu_alloc+0x4e2/0x1240 [ 2393.214090] alloc_vfsmnt+0xfd/0x680 [ 2393.214107] clone_mnt+0x6c/0xce0 [ 2393.214130] copy_tree+0x3b0/0xa60 [ 2393.214156] copy_mnt_ns+0x144/0xa00 [ 2393.214172] ? kmem_cache_alloc+0x2a6/0x310 [ 2393.214195] create_new_namespaces+0xd6/0xb20 [ 2393.214219] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2393.214242] ksys_unshare+0x449/0x8a0 [ 2393.214255] ? unshare_fd+0x1c0/0x1c0 [ 2393.214267] ? fput_many+0x2f/0x1a0 06:25:59 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x587) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2393.214289] ? ksys_write+0x1a9/0x260 [ 2393.214317] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2393.214333] __x64_sys_unshare+0x2d/0x40 [ 2393.214347] do_syscall_64+0x33/0x40 [ 2393.214365] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2393.214378] RIP: 0033:0x7f8f4fbc7b19 [ 2393.214394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2393.214401] RSP: 002b:00007f8f4d13d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2393.214415] RAX: ffffffffffffffda RBX: 00007f8f4fcdaf60 RCX: 00007f8f4fbc7b19 [ 2393.214422] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 06:25:59 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 83) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2393.214430] RBP: 00007f8f4d13d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2393.214439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2393.214450] R13: 00007ffca876f03f R14: 00007f8f4d13d300 R15: 0000000000022000 [ 2393.420123] FAULT_INJECTION: forcing a failure. [ 2393.420123] name failslab, interval 1, probability 0, space 0, times 0 [ 2393.420139] CPU: 1 PID: 12920 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2393.420147] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 06:26:00 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x70b) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:26:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/75, 0x4b}, {&(0x7f00000002c0)=""/106, 0x6a}], 0x2) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff457}, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) r2 = gettid() r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r4, 0x29, 0x18, 0x0, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x80, 0x7, 0x1c, @loopback, @loopback, 0x8040, 0x80, 0xfffffffc}}) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) kcmp(r2, 0x0, 0x3, r1, r3) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001600010c0000000300ffff9d3e29af79fd8affff0097b9bb8db7de577b7e2ef7f9798f8932628530689221561f11869daf1fd9f4cb43cb87628eb97adfc5ef820022c94b69cbce649f377377739eb28528067ff3a76dd5ac1525b00000000000005e447e55379bcb9a2bb88bdca6e7800c64e7523a7f08c059f384c66f8abfa68773fca14b6a701d18c9817395ec5870be0aec15c700"/173], 0x14}}, 0x0) read(r5, &(0x7f0000000080)=""/65, 0x41) [ 2393.420151] Call Trace: [ 2393.420171] dump_stack+0x107/0x167 [ 2393.420185] should_fail.cold+0x5/0xa [ 2393.420203] ? create_object.isra.0+0x3a/0xa20 [ 2393.420224] should_failslab+0x5/0x20 [ 2393.420243] kmem_cache_alloc+0x5b/0x310 [ 2393.420259] ? mark_held_locks+0x9e/0xe0 [ 2393.420273] create_object.isra.0+0x3a/0xa20 [ 2393.420294] kmemleak_alloc_percpu+0xa0/0x100 [ 2393.420310] pcpu_alloc+0x4e2/0x1240 [ 2393.420337] alloc_vfsmnt+0xfd/0x680 [ 2393.420353] clone_mnt+0x6c/0xce0 [ 2393.420372] copy_tree+0x3b0/0xa60 [ 2393.420391] copy_mnt_ns+0x144/0xa00 [ 2393.420406] ? kmem_cache_alloc+0x2a6/0x310 [ 2393.420428] create_new_namespaces+0xd6/0xb20 [ 2393.420447] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2393.420465] ksys_unshare+0x449/0x8a0 [ 2393.420476] ? unshare_fd+0x1c0/0x1c0 [ 2393.420486] ? fput_many+0x2f/0x1a0 [ 2393.420498] ? ksys_write+0x1a9/0x260 [ 2393.420515] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2393.420529] __x64_sys_unshare+0x2d/0x40 [ 2393.420539] do_syscall_64+0x33/0x40 [ 2393.420551] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2393.420559] RIP: 0033:0x7f6b112f9b19 [ 2393.420571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2393.420578] RSP: 002b:00007f6b0e84e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2393.420591] RAX: ffffffffffffffda RBX: 00007f6b1140d020 RCX: 00007f6b112f9b19 [ 2393.420598] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2393.420606] RBP: 00007f6b0e84e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2393.420612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2393.420620] R13: 00007ffd6618d60f R14: 00007f6b0e84e300 R15: 0000000000022000 [ 2393.494155] FAULT_INJECTION: forcing a failure. [ 2393.494155] name failslab, interval 1, probability 0, space 0, times 0 [ 2393.494170] CPU: 1 PID: 12924 Comm: syz-executor.0 Not tainted 5.10.224 #1 [ 2393.494177] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2393.494181] Call Trace: [ 2393.494199] dump_stack+0x107/0x167 [ 2393.494212] should_fail.cold+0x5/0xa [ 2393.494229] ? create_object.isra.0+0x3a/0xa20 [ 2393.494246] should_failslab+0x5/0x20 [ 2393.494262] kmem_cache_alloc+0x5b/0x310 [ 2393.494277] ? mark_held_locks+0x9e/0xe0 [ 2393.494291] create_object.isra.0+0x3a/0xa20 [ 2393.494310] kmemleak_alloc_percpu+0xa0/0x100 [ 2393.494326] pcpu_alloc+0x4e2/0x1240 [ 2393.494353] alloc_vfsmnt+0xfd/0x680 [ 2393.494368] clone_mnt+0x6c/0xce0 [ 2393.494388] copy_tree+0x3b0/0xa60 [ 2393.494407] copy_mnt_ns+0x144/0xa00 [ 2393.494422] ? kmem_cache_alloc+0x2a6/0x310 [ 2393.494441] create_new_namespaces+0xd6/0xb20 [ 2393.494458] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2393.494475] ksys_unshare+0x449/0x8a0 [ 2393.494486] ? unshare_fd+0x1c0/0x1c0 [ 2393.494496] ? fput_many+0x2f/0x1a0 [ 2393.494511] ? ksys_write+0x1a9/0x260 [ 2393.494528] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2393.494542] __x64_sys_unshare+0x2d/0x40 [ 2393.494552] do_syscall_64+0x33/0x40 [ 2393.494564] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2393.494573] RIP: 0033:0x7f8f4fbc7b19 [ 2393.494584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2393.494591] RSP: 002b:00007f8f4d13d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2393.494605] RAX: ffffffffffffffda RBX: 00007f8f4fcdaf60 RCX: 00007f8f4fbc7b19 [ 2393.494612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2393.494620] RBP: 00007f8f4d13d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2393.494626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2393.494634] R13: 00007ffca876f03f R14: 00007f8f4d13d300 R15: 0000000000022000 06:26:00 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 77) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2393.703832] FAULT_INJECTION: forcing a failure. [ 2393.703832] name failslab, interval 1, probability 0, space 0, times 0 [ 2393.705974] CPU: 0 PID: 12941 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2393.706647] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2393.707457] Call Trace: [ 2393.707716] dump_stack+0x107/0x167 [ 2393.708069] should_fail.cold+0x5/0xa [ 2393.708453] ? alloc_vfsmnt+0x23/0x680 [ 2393.708840] should_failslab+0x5/0x20 [ 2393.709211] kmem_cache_alloc+0x5b/0x310 [ 2393.709604] ? copy_tree+0x61a/0xa60 [ 2393.709967] alloc_vfsmnt+0x23/0x680 [ 2393.710325] clone_mnt+0x6c/0xce0 [ 2393.710672] copy_tree+0x3b0/0xa60 [ 2393.711028] copy_mnt_ns+0x144/0xa00 [ 2393.711390] ? kmem_cache_alloc+0x2a6/0x310 [ 2393.711806] create_new_namespaces+0xd6/0xb20 [ 2393.712239] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2393.712713] ksys_unshare+0x449/0x8a0 [ 2393.713074] ? unshare_fd+0x1c0/0x1c0 [ 2393.713434] ? fput_many+0x2f/0x1a0 [ 2393.713792] ? ksys_write+0x1a9/0x260 [ 2393.714166] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2393.714670] __x64_sys_unshare+0x2d/0x40 [ 2393.715059] do_syscall_64+0x33/0x40 [ 2393.715415] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2393.715902] RIP: 0033:0x7f6b112f9b19 [ 2393.716258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2393.717895] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2393.718543] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 [ 2393.719144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2393.719742] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2393.720346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2393.720981] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 06:26:14 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) io_setup(0x5, &(0x7f0000000700)=0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000240)=0x40, 0x4) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0001bfbd17d6e600004c98000c00990000000800c400050000839778e5b218a6cc3f1ee0f87100"], 0x28}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) 06:26:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000014c0)=""/4089, 0xff9}], 0x0) dup2(r3, r4) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000120000012cbd7000fbdbdf25fe8000000e0000000000000000000025000004d20a002b0005001900ff000000dbafe3c4448216aa3cda80fe0caec74ae470f8c7d8cd0c88563174031487d39a5da96254248bcb7c30806263509f577a9cb235e43df61bc110742c5422418979661648dc8c095eae4d4acca5a80e0c9f7d7493"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) dup2(r4, r2) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:26:14 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x589) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:26:14 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 78) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:26:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x70d) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:26:14 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 84) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:26:14 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0xf}, 0x40ac2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept4$unix(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000040)=0x6e, 0x800) fadvise64(r0, 0x1, 0x166000000000, 0x3) timer_create(0x6, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f0000000240)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000640)={0x0, 0xfffffffffffffffe, 0x69, 0x8, @buffer={0x0, 0xdc, &(0x7f0000000340)=""/220}, &(0x7f00000004c0)="243d0e9fd0ec9ea589c33cf25c63dcb5204c1b64a4bd0b4ece825e878db0889d26c1820cb37042c8a345da7c4781fddb35e99f94a758f9a93fa5839d33d0359fdb0316fc297a317ebb884d2e921c2caac9139a805830a62e7be8251c70239d38801ed1b52e7e08f766", &(0x7f0000000540)=""/246, 0x4, 0x10004, 0xffffffffffffffff, &(0x7f0000000100)}) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x20001, &(0x7f0000000740)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}, {@version_L}], [{@appraise}]}}) setsockopt$inet6_tcp_int(r2, 0x6, 0x5, &(0x7f00000002c0)=0x800, 0x4) r3 = perf_event_open$cgroup(&(0x7f00000018c0)={0x5, 0x80, 0xd2, 0x40, 0x7f, 0x0, 0x0, 0x3, 0xa00, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ff, 0x2}, 0x1000, 0xe573, 0x2, 0x7, 0x8, 0x7, 0x3ff, 0x0, 0x8, 0x0, 0x20}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x6) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000001940), &(0x7f0000001980), 0x2, 0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001600810d00fc3a24ed579cfaa17f59f1218633"], 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) 06:26:14 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x70b) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2407.714273] FAULT_INJECTION: forcing a failure. [ 2407.714273] name failslab, interval 1, probability 0, space 0, times 0 [ 2407.715264] CPU: 1 PID: 12966 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2407.716840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2407.717948] Call Trace: [ 2407.718287] dump_stack+0x107/0x167 [ 2407.718803] should_fail.cold+0x5/0xa [ 2407.719314] ? create_object.isra.0+0x3a/0xa20 [ 2407.719936] should_failslab+0x5/0x20 [ 2407.720434] kmem_cache_alloc+0x5b/0x310 [ 2407.721002] ? find_held_lock+0x2c/0x110 [ 2407.721550] create_object.isra.0+0x3a/0xa20 [ 2407.722125] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2407.722811] kmem_cache_alloc+0x159/0x310 [ 2407.723381] alloc_vfsmnt+0x23/0x680 [ 2407.723885] clone_mnt+0x6c/0xce0 [ 2407.724374] copy_tree+0x3b0/0xa60 [ 2407.724895] copy_mnt_ns+0x144/0xa00 [ 2407.725429] ? kmem_cache_alloc+0x2a6/0x310 [ 2407.726021] create_new_namespaces+0xd6/0xb20 [ 2407.726675] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2407.727351] ksys_unshare+0x449/0x8a0 [ 2407.727894] ? unshare_fd+0x1c0/0x1c0 [ 2407.728425] ? fput_many+0x2f/0x1a0 [ 2407.728923] ? ksys_write+0x1a9/0x260 [ 2407.729445] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2407.730134] __x64_sys_unshare+0x2d/0x40 [ 2407.730690] do_syscall_64+0x33/0x40 [ 2407.731194] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2407.731887] RIP: 0033:0x7f6b112f9b19 [ 2407.732393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2407.734828] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2407.735818] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 [ 2407.736752] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2407.737727] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2407.738684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2407.739630] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 [ 2407.758137] FAULT_INJECTION: forcing a failure. [ 2407.758137] name failslab, interval 1, probability 0, space 0, times 0 [ 2407.759452] CPU: 0 PID: 12973 Comm: syz-executor.0 Not tainted 5.10.224 #1 [ 2407.760179] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2407.761108] Call Trace: [ 2407.761485] dump_stack+0x107/0x167 [ 2407.761879] should_fail.cold+0x5/0xa [ 2407.762292] ? create_object.isra.0+0x3a/0xa20 [ 2407.762843] should_failslab+0x5/0x20 [ 2407.763255] kmem_cache_alloc+0x5b/0x310 [ 2407.763752] ? find_held_lock+0x2c/0x110 [ 2407.764185] create_object.isra.0+0x3a/0xa20 [ 2407.764707] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2407.765247] kmem_cache_alloc+0x159/0x310 [ 2407.765790] alloc_vfsmnt+0x23/0x680 [ 2407.766201] clone_mnt+0x6c/0xce0 [ 2407.766627] copy_tree+0x3b0/0xa60 [ 2407.767029] copy_mnt_ns+0x144/0xa00 [ 2407.767485] ? kmem_cache_alloc+0x2a6/0x310 [ 2407.767945] create_new_namespaces+0xd6/0xb20 [ 2407.768491] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2407.769031] ksys_unshare+0x449/0x8a0 [ 2407.769525] ? unshare_fd+0x1c0/0x1c0 [ 2407.769932] ? fput_many+0x2f/0x1a0 [ 2407.770326] ? ksys_write+0x1a9/0x260 [ 2407.770784] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2407.771394] __x64_sys_unshare+0x2d/0x40 [ 2407.771837] do_syscall_64+0x33/0x40 [ 2407.772246] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2407.773096] RIP: 0033:0x7f8f4fbc7b19 [ 2407.773574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2407.775621] RSP: 002b:00007f8f4d13d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2407.776490] RAX: ffffffffffffffda RBX: 00007f8f4fcdaf60 RCX: 00007f8f4fbc7b19 [ 2407.777231] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2407.778081] RBP: 00007f8f4d13d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2407.778887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2407.779719] R13: 00007ffca876f03f R14: 00007f8f4d13d300 R15: 0000000000022000 06:26:28 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) fsetxattr$security_evm(r0, &(0x7f0000000140), &(0x7f00000001c0)=@v1={0x2, "2a6039d0a7e4e15ed3be3dff"}, 0xd, 0x2) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) syz_io_uring_setup(0x55da, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x55db, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_FALLOCATE, 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_SENDMSG={0x9, 0x5564eb2a27cc113, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000440)="5a37d19e61ca4b7da301b4d15ab18df6c6161cd88246bacabb61f8d52ea290a1c1", 0x21}, {&(0x7f0000000540)="ce3371696dd3f740ed534339d4a2c3031abe6b6e210db5116721f8bd3783872469ee4774630fcb88dd24f43e51ea5badf378cfa0b074728937ebd4144b28cd656aa21d2847123311592266463a1d6fcdaaa1cf951c1b8f94d338bafbe472e88c458686", 0x63}, {&(0x7f00000005c0)="1c8caba5e6821ef9cb024cfbad98c55cff267696c4a722b0ccd524e45ed2eba5ae25d848b62189edf442251973ad4f83be796dae6dfcc991e29cbd433975e8a98b9d5998f85c4941c7b7d0ad3684897eaa7619a4414644ded0ae8af60f8cfb4199cc649394a7de6c2807bfaebe637f9cc05c2fc38921458f00b8c65bcf5eaa25a75a6271a08302b6f0a7948d25389438b638958ad79777ea1ecaab022d7090701255f814f6", 0xa5}, {&(0x7f0000000680)="05d16cf6a2df46", 0x7}, {&(0x7f00000006c0)="03cd09301c6d18ee32c23d806559d94fb1375e9dd80f532d3b2b583cba6f0c2ba21e689ca884ed217abbd02da045eb39462652987b18b13b6a621ab7f496fac942ddba19e4f8e7c24311aa3faf72bfbc88f5ccd890371ce36a18a4be305bf4e5c69e2b18646dfa64ad148c15d1d07183d0f715b4fa6824ce67c4c00b4f65606c38", 0x81}, {&(0x7f0000000780)="1e760c633d76eec6396690a6490ca2e2e1dbd43df80d320074414549c9ef", 0x1e}, {&(0x7f00000007c0)="6b0bd8867960cccc344043e1427e490d6cd0e48bbacffedc7c62587cd0b7c9ae6634ad88701288d12db020315206bbd093cdf4c474286a94006b278bf40898acc0f0d36da80a9427a596f938ae61479d423d008cb4cea87725daa3bb064d59e8b014ca189a83c24ce2583b106657fdb43e16e4fe4f1193c1af1a7304d459b8d5aaaeb5f787a8fc3e6e4066dc30152fb2c55c706735868c8f981b19dcd6c813b64d7b7f6edbcb878aebd7e81d86178ebba8fc0280af7fcc", 0xb7}, {&(0x7f0000000880)="27dd81b3045c185b85d1b28c08cdfce4d209badd7d03c01beddc7cb53c8a4359a96fa40b61ddc8cd8e7084ec081e8277ba8f9fd9313c8e43b7050d0b0be2c8fa64de04078754ca6719c47fea92a691cef1eeaf72f6e7826e57d433112529cb5bb7d9a6e9a1fada42f4c8ea8dbba38aa13aa132f240b6a2a95ac6fb1d610b8fa61dce9e4f", 0x84}, {&(0x7f0000000940)="2f8b38fde910131f9dc4c0845051da7477c081a42d9313d11caf9e79f5a6266ef1c8f69c41caea11f23f3750ae2cc610b8d478d6fe025e0d3f88ff9a879c8cb4f7dc3fcdaebbb969097de5a5585b6fc55242421dbf3d35f5a6d6f0b4c78c19d08f087295a516fda1ed132ed2734e1bbc1fe87611bb124c146cdab526b634fbd3962ec5be2fe52526b4365f3b1f8b13b04596b12aef4678d92886f171578602f0e196a9acaa5582757d9fcfc13d87798e0338", 0xb2}, {&(0x7f0000000a00)="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", 0x1000}], 0xa, &(0x7f0000001e00)=[{0xe8, 0x29, 0x9e9, "36216f01cb102b972ad35fb5a49391b57acc703d66fce44d346c471b1e6c00b268b6a4f1a1cd756cc2d803934b5b02a8420e498a2186e762af06fb082af85790c39be418392962b0836d378296a7d21144f84b4541d5e1388d71fe779597725f5540c138b5d329d4d5e9c761820e3d2def2b0d3b79a83a3c04ea288c4355bc194b4c265bbbeff305f50c165df68bdcad213c373b93647697b6091a8b4da86cf798fb95f94541b8e4f2377033a0545d08c741305f8c030c1282beb4f845e9b0919437ebb0fe8330f22056ebb9910b17ab313fa232a4"}, {0x110, 0x104, 0xbdb, "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"}, {0xc8, 0x117, 0x3, "c694e9537dd0c84229fbb6daa11459944f40bf88aff0fd0f5bf8d36216eccfb6a0bd9b1283df4381c394cc6f7d57f69c0aa21118d88cbe7f7207dd8c07999c8c627c7a79ad1988e56651eba1ea7e90d35cc8f091d51c3f35740e7ba5d975c1537b4b9f8106cb5c534ffa31dab2bdb711cdba0f2a09f846c7fa1e4bd7db7d83a595cb9898adf5f880f4eb4896be781ec0aeffa3aa262f4eec68622830251ec3ec6bd70477ce18163d780a969f010722678793fef5"}, {0xc0, 0x110, 0x3, "9ed1ecc70685d617a64d56df87bd6a5845fb13f10dc61689d1bee97c208934c39162160f08cda8501d7e7c3669ddcdd0e1a98410fb396d96ce4164823c61bea9ba306c80847c8bbf90215d0f9a011296461ace52e191c07469c4d72240f7938606900582e014e6b7b73e40ba84d76f286e8d6b980284c315737b6d7493509f70774c88c3331d2f83befd22a4abf487c4c857d5c1a7b389ea3d85ff9248355608bd3696ef67b0640ba831f3"}], 0x380}, 0x0, 0x40000, 0x1, {0x0, r4}}, 0x3) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0x607) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r5, &(0x7f0000000080)=""/65, 0x41) 06:26:28 executing program 3: timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$setpipe(r0, 0x407, 0x1) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) 06:26:28 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x70d) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:26:28 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x5aa) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:26:28 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 79) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:26:28 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 85) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:26:28 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x72e) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:26:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)=0x1) pwrite64(r2, &(0x7f0000000340)="4da4f3520f6d667ed5d2b8b914c6a0c66eb12dc22ceddd4dc192b86f776042434879e1b8d94f4184c0b7b59bdbe68993a0a886ab6233653477fc31f21f4e8cbe5e077b464cfb2b8af4dfb7ddcd2bcd0879ec7f63e2811c781fbaf40e60bfb8e963dbe6d98bd8b5704111381bc09dc630048e56575f5bcb2a09a227d5a675ea60a81d42a52a6da8eba2a47967e6e4cad0efe3f1573d9519a32e09095237cfad76e79798043b3c3a71801790b7eb9ab9e2b65514dcea4b62affa91c64cd69649c867ed5966ddbb1969976c655e20a08046ee71263bdddf07e581a77c42d4e07d6e07bb9302e3c8365baca60470d91e1e214ef444", 0xf3, 0xa289) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r3, &(0x7f00000014c0)="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", 0x1000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r4, r5) unshare(0x10000800) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2422.270897] FAULT_INJECTION: forcing a failure. [ 2422.270897] name failslab, interval 1, probability 0, space 0, times 0 [ 2422.272056] CPU: 0 PID: 13002 Comm: syz-executor.0 Not tainted 5.10.224 #1 [ 2422.273467] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2422.274235] Call Trace: [ 2422.274682] dump_stack+0x107/0x167 [ 2422.275030] should_fail.cold+0x5/0xa [ 2422.275432] should_failslab+0x5/0x20 [ 2422.276200] __kmalloc_track_caller+0x79/0x370 [ 2422.277017] ? kstrdup_const+0x53/0x80 [ 2422.277397] kstrdup+0x36/0x70 [ 2422.278105] kstrdup_const+0x53/0x80 [ 2422.278585] alloc_vfsmnt+0xb5/0x680 [ 2422.279402] clone_mnt+0x6c/0xce0 [ 2422.280178] copy_tree+0x3b0/0xa60 [ 2422.280981] copy_mnt_ns+0x144/0xa00 [ 2422.281788] ? kmem_cache_alloc+0x2a6/0x310 [ 2422.282727] create_new_namespaces+0xd6/0xb20 [ 2422.283698] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2422.284783] ksys_unshare+0x449/0x8a0 [ 2422.285618] ? unshare_fd+0x1c0/0x1c0 [ 2422.286453] ? fput_many+0x2f/0x1a0 [ 2422.287258] ? ksys_write+0x1a9/0x260 [ 2422.288104] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2422.289269] __x64_sys_unshare+0x2d/0x40 [ 2422.290161] do_syscall_64+0x33/0x40 [ 2422.290976] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2422.292100] RIP: 0033:0x7f8f4fbc7b19 [ 2422.292928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2422.296999] RSP: 002b:00007f8f4d13d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2422.298676] RAX: ffffffffffffffda RBX: 00007f8f4fcdaf60 RCX: 00007f8f4fbc7b19 [ 2422.300252] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2422.301836] RBP: 00007f8f4d13d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2422.303429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2422.305003] R13: 00007ffca876f03f R14: 00007f8f4d13d300 R15: 0000000000022000 [ 2422.322288] FAULT_INJECTION: forcing a failure. [ 2422.322288] name failslab, interval 1, probability 0, space 0, times 0 [ 2422.324899] CPU: 0 PID: 13007 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2422.326419] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2422.328243] Call Trace: [ 2422.328838] dump_stack+0x107/0x167 [ 2422.329639] should_fail.cold+0x5/0xa [ 2422.330492] should_failslab+0x5/0x20 [ 2422.331331] __kmalloc_track_caller+0x79/0x370 [ 2422.332335] ? kstrdup_const+0x53/0x80 [ 2422.333204] kstrdup+0x36/0x70 [ 2422.333912] kstrdup_const+0x53/0x80 [ 2422.334737] alloc_vfsmnt+0xb5/0x680 [ 2422.335562] clone_mnt+0x6c/0xce0 [ 2422.336335] copy_tree+0x3b0/0xa60 [ 2422.337130] copy_mnt_ns+0x144/0xa00 [ 2422.337959] ? kmem_cache_alloc+0x2a6/0x310 [ 2422.338920] create_new_namespaces+0xd6/0xb20 [ 2422.339911] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2422.341020] ksys_unshare+0x449/0x8a0 [ 2422.341847] ? unshare_fd+0x1c0/0x1c0 [ 2422.342684] ? fput_many+0x2f/0x1a0 [ 2422.343491] ? ksys_write+0x1a9/0x260 [ 2422.344337] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2422.345500] __x64_sys_unshare+0x2d/0x40 [ 2422.346392] do_syscall_64+0x33/0x40 [ 2422.347205] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2422.348332] RIP: 0033:0x7f6b112f9b19 [ 2422.349158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2422.353235] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2422.354909] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 [ 2422.356474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2422.358049] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2422.359617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2422.361191] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 06:26:28 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 86) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:26:28 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) timer_create(0x4, &(0x7f0000000040)={0x0, 0x2a, 0x4, @thr={&(0x7f00000004c0)="3820bf6ca3a4feb500d61269073b7ca26c82b0d0c6eafbb34a19b88c1eb88c9104dd9f57815f02dacbc7c1bba723fb773de069f37236a0a31b9848931ed7e8c741203e2f80ac0729fd00fa4eade6bf3ddcdf7503d489e78861a3eecdd9b93723fbdf8b9917da42096b11ca43265ef1ca836b41fb6e15d4e6a67c1d8633c930a7013608648d2b5bdd9ee8657f8c7795b6c614ddfedbcd5ec56a208e0fb22b151afc54e35e113e9d8b3d800feffb88e9c50fbe79ea3cab860a3b24f774265ff9a7977415d28c3e9f54e1ec27c21130813e7cc92b95a628a8100c6d3092804e0871fcd170efd83dc3e1eb175f48", &(0x7f0000000200)="19d130bb31c9c340727301ef4cdcbcbfabf1fb056c5d2aa34d0fd0ca8feca84d887dec22ceffa6ad14972fa53ea214fa0e7a62ad3adb5b4db10df11f73db8a81a414d7e1e32b3775782bf989c5e4afcd11537c1e5ac02155ec9484539a64d1"}}, &(0x7f00000003c0)=0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000005c0)={{}, {r1, r2+60000000}}, &(0x7f0000000600)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x4, &(0x7f0000000100)={0x0, 0x17, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) timer_gettime(r4, &(0x7f00000001c0)) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001600010d1cab7a9360740a8f0829f4791fbf8e0ef346e8934427bcfdf40afcb569ea9e38fbb539416e348b2b37a0829ae947cae9f402b07662a6abdadfcfe9603a3cd6d18203213cf941f556d182387658f213389721e55adb2ddc0fdd53392b6e53ec0f9478aaf5d26453425156b84ba2c9d6a666155b7d341f4e0790458b3de8c3edf3a278e772edbeb4e09317987edc17bc29d7de2e21a8b45cff176c9aea19b6a7a96167057e7dfaa01af51b5772ec34192daa3c297fd9e3552a90fcdda02a06992bb8d4930424d341797afda101273e98"], 0x14}}, 0x0) read(r3, &(0x7f0000000080)=""/65, 0x41) 06:26:29 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r0], 0x14}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000000) read(r1, &(0x7f0000000080)=""/65, 0x41) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x125}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) [ 2422.500714] FAULT_INJECTION: forcing a failure. [ 2422.500714] name failslab, interval 1, probability 0, space 0, times 0 [ 2422.503482] CPU: 0 PID: 13023 Comm: syz-executor.0 Not tainted 5.10.224 #1 [ 2422.505106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2422.507045] Call Trace: [ 2422.507663] dump_stack+0x107/0x167 [ 2422.508519] should_fail.cold+0x5/0xa [ 2422.509411] ? create_object.isra.0+0x3a/0xa20 [ 2422.510487] should_failslab+0x5/0x20 [ 2422.511379] kmem_cache_alloc+0x5b/0x310 [ 2422.512325] create_object.isra.0+0x3a/0xa20 [ 2422.513353] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2422.514538] __kmalloc_track_caller+0x177/0x370 [ 2422.515634] ? kstrdup_const+0x53/0x80 [ 2422.516554] kstrdup+0x36/0x70 [ 2422.517299] kstrdup_const+0x53/0x80 [ 2422.518166] alloc_vfsmnt+0xb5/0x680 [ 2422.519037] clone_mnt+0x6c/0xce0 [ 2422.519850] copy_tree+0x3b0/0xa60 [ 2422.520693] copy_mnt_ns+0x144/0xa00 [ 2422.521557] ? kmem_cache_alloc+0x2a6/0x310 [ 2422.522571] create_new_namespaces+0xd6/0xb20 [ 2422.523614] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2422.524780] ksys_unshare+0x449/0x8a0 [ 2422.525660] ? unshare_fd+0x1c0/0x1c0 [ 2422.526545] ? fput_many+0x2f/0x1a0 [ 2422.527396] ? ksys_write+0x1a9/0x260 [ 2422.528295] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2422.529521] __x64_sys_unshare+0x2d/0x40 [ 2422.530462] do_syscall_64+0x33/0x40 [ 2422.531327] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2422.532529] RIP: 0033:0x7f8f4fbc7b19 [ 2422.533398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2422.537718] RSP: 002b:00007f8f4d13d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2422.539480] RAX: ffffffffffffffda RBX: 00007f8f4fcdaf60 RCX: 00007f8f4fbc7b19 [ 2422.541317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2422.542977] RBP: 00007f8f4d13d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2422.544647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2422.546312] R13: 00007ffca876f03f R14: 00007f8f4d13d300 R15: 0000000000022000 06:26:29 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 80) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:26:29 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x72e) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2422.658458] FAULT_INJECTION: forcing a failure. [ 2422.658458] name failslab, interval 1, probability 0, space 0, times 0 [ 2422.660743] CPU: 1 PID: 13039 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2422.662397] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2422.663278] Call Trace: [ 2422.663909] dump_stack+0x107/0x167 [ 2422.664774] should_fail.cold+0x5/0xa [ 2422.665200] should_failslab+0x5/0x20 [ 2422.666080] __kmalloc_track_caller+0x79/0x370 [ 2422.666573] ? kstrdup_const+0x53/0x80 [ 2422.667514] kstrdup+0x36/0x70 [ 2422.667865] kstrdup_const+0x53/0x80 [ 2422.668773] alloc_vfsmnt+0xb5/0x680 [ 2422.669692] clone_mnt+0x6c/0xce0 [ 2422.670094] copy_tree+0x3b0/0xa60 [ 2422.670968] copy_mnt_ns+0x144/0xa00 [ 2422.671387] ? kmem_cache_alloc+0x2a6/0x310 [ 2422.672432] create_new_namespaces+0xd6/0xb20 [ 2422.672943] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2422.674147] ksys_unshare+0x449/0x8a0 [ 2422.674567] ? unshare_fd+0x1c0/0x1c0 [ 2422.675454] ? fput_many+0x2f/0x1a0 [ 2422.675866] ? ksys_write+0x1a9/0x260 [ 2422.676781] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2422.677460] __x64_sys_unshare+0x2d/0x40 [ 2422.678414] do_syscall_64+0x33/0x40 [ 2422.679266] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2422.680458] RIP: 0033:0x7f6b112f9b19 [ 2422.681314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2422.685718] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2422.688320] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 [ 2422.690058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2422.691744] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2422.693430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2422.695121] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 06:26:43 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 87) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:26:43 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x5ac) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:26:43 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 81) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2436.656395] FAULT_INJECTION: forcing a failure. [ 2436.656395] name failslab, interval 1, probability 0, space 0, times 0 [ 2436.657545] CPU: 0 PID: 13059 Comm: syz-executor.0 Not tainted 5.10.224 #1 [ 2436.658215] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2436.659014] Call Trace: [ 2436.659283] dump_stack+0x107/0x167 [ 2436.659627] should_fail.cold+0x5/0xa [ 2436.660022] ? create_object.isra.0+0x3a/0xa20 [ 2436.660462] should_failslab+0x5/0x20 [ 2436.660837] kmem_cache_alloc+0x5b/0x310 [ 2436.661249] create_object.isra.0+0x3a/0xa20 [ 2436.661678] kmemleak_alloc_percpu+0xa0/0x100 [ 2436.662128] pcpu_alloc+0x4e2/0x1240 [ 2436.662497] alloc_vfsmnt+0xfd/0x680 [ 2436.662857] clone_mnt+0x6c/0xce0 [ 2436.663743] copy_tree+0x3b0/0xa60 [ 2436.664122] copy_mnt_ns+0x144/0xa00 [ 2436.664519] ? kmem_cache_alloc+0x2a6/0x310 [ 2436.664969] create_new_namespaces+0xd6/0xb20 [ 2436.665435] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2436.665927] ksys_unshare+0x449/0x8a0 [ 2436.666299] ? unshare_fd+0x1c0/0x1c0 [ 2436.666693] ? fput_many+0x2f/0x1a0 [ 2436.667060] ? ksys_write+0x1a9/0x260 [ 2436.667488] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2436.668722] __x64_sys_unshare+0x2d/0x40 [ 2436.669674] do_syscall_64+0x33/0x40 [ 2436.670521] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2436.671727] RIP: 0033:0x7f8f4fbc7b19 [ 2436.672585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2436.676847] RSP: 002b:00007f8f4d13d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2436.678608] RAX: ffffffffffffffda RBX: 00007f8f4fcdaf60 RCX: 00007f8f4fbc7b19 [ 2436.680251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2436.681890] RBP: 00007f8f4d13d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2436.683539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2436.685183] R13: 00007ffca876f03f R14: 00007f8f4d13d300 R15: 0000000000022000 [ 2436.715216] FAULT_INJECTION: forcing a failure. [ 2436.715216] name failslab, interval 1, probability 0, space 0, times 0 [ 2436.716974] CPU: 1 PID: 13056 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2436.718601] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2436.720535] Call Trace: [ 2436.721158] dump_stack+0x107/0x167 [ 2436.721994] should_fail.cold+0x5/0xa [ 2436.722884] ? create_object.isra.0+0x3a/0xa20 [ 2436.722905] should_failslab+0x5/0x20 [ 2436.722922] kmem_cache_alloc+0x5b/0x310 [ 2436.722936] create_object.isra.0+0x3a/0xa20 [ 2436.722956] kmemleak_alloc_percpu+0xa0/0x100 [ 2436.722970] pcpu_alloc+0x4e2/0x1240 [ 2436.722996] alloc_vfsmnt+0xfd/0x680 06:26:43 executing program 3: timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) clock_gettime(0x5, &(0x7f0000000100)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000140)={{r1, r2+10000000}, {0x0, 0x3938700}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000480), 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, &(0x7f0000000380)="0a2d2da2ef9ee479574e35e3ba64f870fe3898f364eddd8079caf5ae0616dffb698891ce445201982337c5a5bfa42703a314a7f82c9295b30351c6a696d1a7e173ab9cc9af1c5006e0044025e8868a8d1a199d7ed9857476d24dd0f9aa64d4fd35d60e125a3fe8970087fa53f87140bc6771deee3d032144161692536e78de9d5e7ea9018b4c8a352844ade27c0b847b013a69fb35e31382d99427d343e6b914ae7bca84796baedf2aa518fd74886f04d6f48ec7fdc5a1dcb9f193b46a2095f9b8c382aad5ae8afebdc22c157d85110db667e0c10dc6eabec0331261c3337731c637") ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r3, &(0x7f0000000080)='attr\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f00000004c0)=0xc) r5 = clone3(&(0x7f0000000780)={0x10000, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x34}, &(0x7f00000005c0)=""/143, 0x8f, &(0x7f0000000680)=""/173, &(0x7f0000000740)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000840)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) clone3(&(0x7f0000000880)={0x40084000, &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0), {0x38}, &(0x7f0000000300)=""/188, 0xbc, &(0x7f00000003c0)=""/24, &(0x7f0000000800)=[r3, 0x0, r4, r5, 0x0], 0x5, {r6}}, 0x58) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="1400000016000d000000755a970300ffffffff0000337392d308a39426c351f2849bb725d2d301a708c073d8453839c1ad54960a62df0cbe33a67b26e6bd9480dcd88c4f4daa523b16e2b3e7ac29c9ef32d079f212047da77b883bd19d229683fe3a6c216d8c86f4cdcf60240e0284dd7c97d1f13dd6b6ec5280df9265bc0a3897c24c1c99ac81f1dc72584bf687a301332ddd26544567b5c0e9ccf1dd19e83a6327730463cf64f93ff3f693059c1c95a7b9161ac634104068"], 0x14}}, 0x0) read(r7, &(0x7f0000000080)=""/65, 0x41) 06:26:43 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x730) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:26:43 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x730) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:26:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)=0x1) sendfile(r1, r2, &(0x7f0000000400)=0x4, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000340)={{0x0, 0xa440, 0x6, 0x4, 0x10001, 0x9, 0x0, 0x8, 0x3, 0x10001, 0x6, 0x5, 0x3, 0x1, 0x7ff}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r5, r6) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000000000000000000000000009ecf9a76d20a002b0005001900ff000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:26:43 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)=0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f00000001c0)) read(r1, &(0x7f0000000080)=""/65, 0x41) [ 2436.723011] clone_mnt+0x6c/0xce0 [ 2436.723028] copy_tree+0x3b0/0xa60 [ 2436.723046] copy_mnt_ns+0x144/0xa00 [ 2436.723059] ? kmem_cache_alloc+0x2a6/0x310 [ 2436.723077] create_new_namespaces+0xd6/0xb20 [ 2436.723094] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2436.723110] ksys_unshare+0x449/0x8a0 [ 2436.723122] ? unshare_fd+0x1c0/0x1c0 [ 2436.723131] ? fput_many+0x2f/0x1a0 [ 2436.723147] ? ksys_write+0x1a9/0x260 [ 2436.723167] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2436.723181] __x64_sys_unshare+0x2d/0x40 [ 2436.723191] do_syscall_64+0x33/0x40 [ 2436.723203] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2436.723211] RIP: 0033:0x7f6b112f9b19 [ 2436.723222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2436.723229] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2436.723241] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 [ 2436.723247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2436.723254] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2436.723260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2436.723267] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 06:26:43 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000480)={{r1, r2+60000000}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r3, &(0x7f0000000080)=""/65, 0x41) 06:26:43 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 88) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:26:43 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 82) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:26:43 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)=0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000001c0)) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000380)="0a2d2da2ef9ee479574e35e3ba64f870fe3898f364eddd8079caf5ae0616dffb698891ce445201982337c5a5bfa42703a314a7f82c9295b30351c6a696d1a7e173ab9cc9af1c5006e0044025e8868a8d1a199d7ed9857476d24dd0f9aa64d4fd35d60e125a3fe8970087fa53f87140bc6771deee3d032144161692536e78de9d5e7ea9018b4c8a352844ade27c0b847b013a69fb35e31382d99427d343e6b914ae7bca84796baedf2aa518fd74886f04d6f48ec7fdc5a1dcb9f193b46a2095f9b8c382aad5ae8afebdc22c157d85110db667e0c10dc6eabec0331261c3337731c637") ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r2, &(0x7f0000000080)='attr\x00') capset(&(0x7f0000000300)={0x19980330, r2}, &(0x7f0000000440)={0x5566, 0x80000001, 0x10001, 0x9, 0x5, 0x7}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000540)={0xa, 0x4e20, 0x7, @private0, 0xff}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000580)="12c4e1e90ca23dc8bc377e39a47f4b5b931dc1656b46de1b3b12fe4d545672fafd38a67fafd4", 0x26}, {&(0x7f00000005c0)="e5be4483eaaba2c676695e3d472ad9aff67d51414627881ff9ec3b4febdcb82f2544d789436469b9e7347efe39282bf1848bdbc6e4babb34e35fb8b7a18b87abf7b988b7e7065515bf03afe1254a5491a2b89c4c86e99a624a6c8a5f8add09bf404f05a9585c645e00138efc396dbb0e3371be0867f2b7fef1c55acce5874515bdba30983ccf3db6f5127d80b371d35df2090a", 0x93}, {&(0x7f0000000680)="f6e88b6983c7e8a164c82a0327156c3f488f32c93d4587c33cef710b4eb87bc1dd9d236f4cb2c3fe48f8da2f26e5d6bd7a41cb5b40c739a6a8b535b54364e33e37799318ea5422fd940084c13a24d045a724e0c348fe3a49d9a5fcefdb562d0e269ad8940557246a51377946420b", 0x6e}, {&(0x7f0000000700)="b3657781e98f2cc80cbcf972df636e1cf9c03942d3b1d3f0d6d4a9a58ab72ac4aa98da162af19765b717ec77e6b82c698313949591f25e714ba2dbc724817e29a280825294ad026c252082e97d5a75de366c405e", 0x54}, {&(0x7f0000000780)="05d18f2d64cc5e819432f43e24430ed9abe851a4bc1b0d466eb97e1e36d522614c6cd8a1bcbf7fcbc9a5b3cafb996272c157371408b0042769ad05fc0d0c8b6629552e401b52c7", 0x47}, {&(0x7f0000000800)="380c1ff0e5e6cac491a1f3feaa56fc9fb180832f35dd901cf502c794ec2edb0de015926b90be423d415fb613f4ec0815897f3425642dabb81a8b052ad05161c0ceb5dba6f08020163978733d1c82aba05ea86915104c983ade83cc2fbd6b348e58b38ee3ac4cb2dc1531e53c17354d18998371e8b264a1f6c7d9bcb5c57adf7cb95789313163aab4026bc48c84de3d898b81e7b867b9549c355190f73114c086447900dc6f0e9a8349ef2f1e967c7c6149003127af8e9552e46406d429fd3b55a0cb7ea56cdbf6fb4fe06fabf3e7a18d1f2f8d0f1fc708d02d292d0080770056edfd1d6ffe4e52d0f7b468a0793b00ad05", 0xf1}, {&(0x7f0000000900)="24e91db910c0ccefb65a3d29b0b4de3357e0f8cc0eca8ca13b61087e5ec26caacdeea50a13974b4c5a0fb4fcb23f7cbc9df0ecc38eb40a2e87a32ccdd33ae277f2d6d4fff771f7f2e232a3fd2807ffe796378a9dc1240c6598c73aed2a517cc44755484b1a608ee07c6411de6a9beef1d94c3c0a462c3c48f19a0857fda46651e2f5448c0c3b17bcf991771873da4bab8e5b1ad7ab0a3ea0f4fcf373", 0x9c}, {&(0x7f00000009c0)="ac2ec5632f753c9095d12c031d4cd4802102405e508b11a7bd0557ae981b49d02446c14614c98bfb728dea30e1d9cae9c153789b514b5743694245f7fb8ee29e2f785cb2caa4f46a27d6b8913a6835597fa7847e20bda40fe62ce9fa14ea838e0fcd7099f5abbfd8e91fa3de802f57ff2f9e900e3d3bfa3d27649591aa6a0ef6e07a5cb287f97397eb23cf94fdbc82067a8479d7f7afd0b25893c9c9331ae9159f1de95dc4654a738afa5048", 0xac}], 0x8, &(0x7f0000000b00)}, 0x840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r3, &(0x7f0000000080)=""/65, 0x41) capset(&(0x7f0000000200)={0x20071026}, &(0x7f00000002c0)={0x5, 0x7fffffff, 0x214f, 0x9, 0x1db, 0xfffffffb}) [ 2437.007560] FAULT_INJECTION: forcing a failure. [ 2437.007560] name failslab, interval 1, probability 0, space 0, times 0 [ 2437.010349] CPU: 0 PID: 13089 Comm: syz-executor.0 Not tainted 5.10.224 #1 [ 2437.011982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2437.013219] Call Trace: [ 2437.013502] dump_stack+0x107/0x167 [ 2437.013845] should_fail.cold+0x5/0xa [ 2437.014209] ? create_object.isra.0+0x3a/0xa20 [ 2437.014665] should_failslab+0x5/0x20 [ 2437.015033] kmem_cache_alloc+0x5b/0x310 [ 2437.015419] ? mark_held_locks+0x9e/0xe0 [ 2437.015827] create_object.isra.0+0x3a/0xa20 [ 2437.016266] kmemleak_alloc_percpu+0xa0/0x100 [ 2437.016703] pcpu_alloc+0x4e2/0x1240 [ 2437.017061] alloc_vfsmnt+0xfd/0x680 [ 2437.017424] clone_mnt+0x6c/0xce0 [ 2437.017780] copy_tree+0x3b0/0xa60 [ 2437.018119] copy_mnt_ns+0x144/0xa00 [ 2437.018474] ? kmem_cache_alloc+0x2a6/0x310 [ 2437.018906] create_new_namespaces+0xd6/0xb20 [ 2437.019329] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2437.019820] ksys_unshare+0x449/0x8a0 [ 2437.020181] ? unshare_fd+0x1c0/0x1c0 [ 2437.020537] ? fput_many+0x2f/0x1a0 [ 2437.020920] ? ksys_write+0x1a9/0x260 [ 2437.021264] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2437.021715] __x64_sys_unshare+0x2d/0x40 [ 2437.022072] do_syscall_64+0x33/0x40 [ 2437.022401] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2437.022832] RIP: 0033:0x7f8f4fbc7b19 [ 2437.023161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2437.024728] RSP: 002b:00007f8f4d13d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2437.025382] RAX: ffffffffffffffda RBX: 00007f8f4fcdaf60 RCX: 00007f8f4fbc7b19 [ 2437.025979] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2437.026602] RBP: 00007f8f4d13d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2437.027209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2437.027802] R13: 00007ffca876f03f R14: 00007f8f4d13d300 R15: 0000000000022000 06:26:43 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x5cd) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2437.098903] FAULT_INJECTION: forcing a failure. [ 2437.098903] name failslab, interval 1, probability 0, space 0, times 0 [ 2437.100282] CPU: 1 PID: 13093 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2437.100888] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2437.101588] Call Trace: [ 2437.101828] dump_stack+0x107/0x167 [ 2437.101842] should_fail.cold+0x5/0xa [ 2437.101859] ? create_object.isra.0+0x3a/0xa20 [ 2437.101879] should_failslab+0x5/0x20 [ 2437.101903] kmem_cache_alloc+0x5b/0x310 [ 2437.101919] ? mark_held_locks+0x9e/0xe0 [ 2437.101934] create_object.isra.0+0x3a/0xa20 [ 2437.101954] kmemleak_alloc_percpu+0xa0/0x100 [ 2437.101969] pcpu_alloc+0x4e2/0x1240 [ 2437.101997] alloc_vfsmnt+0xfd/0x680 [ 2437.102012] clone_mnt+0x6c/0xce0 [ 2437.102031] copy_tree+0x3b0/0xa60 [ 2437.102050] copy_mnt_ns+0x144/0xa00 [ 2437.102065] ? kmem_cache_alloc+0x2a6/0x310 [ 2437.102083] create_new_namespaces+0xd6/0xb20 [ 2437.102101] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2437.102119] ksys_unshare+0x449/0x8a0 [ 2437.102130] ? unshare_fd+0x1c0/0x1c0 [ 2437.102141] ? fput_many+0x2f/0x1a0 [ 2437.102157] ? ksys_write+0x1a9/0x260 [ 2437.102174] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2437.102189] __x64_sys_unshare+0x2d/0x40 [ 2437.102200] do_syscall_64+0x33/0x40 [ 2437.102213] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2437.102222] RIP: 0033:0x7f6b112f9b19 [ 2437.102234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2437.102241] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2437.102256] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 [ 2437.102263] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2437.102270] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2437.102277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2437.102285] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 [ 2450.592497] FAULT_INJECTION: forcing a failure. [ 2450.592497] name failslab, interval 1, probability 0, space 0, times 0 [ 2450.593570] CPU: 1 PID: 13117 Comm: syz-executor.0 Not tainted 5.10.224 #1 [ 2450.594147] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2450.594881] Call Trace: [ 2450.595113] dump_stack+0x107/0x167 [ 2450.595472] should_fail.cold+0x5/0xa [ 2450.595805] ? alloc_vfsmnt+0x23/0x680 [ 2450.596145] should_failslab+0x5/0x20 [ 2450.596548] kmem_cache_alloc+0x5b/0x310 [ 2450.596906] ? copy_tree+0x61a/0xa60 [ 2450.597632] alloc_vfsmnt+0x23/0x680 [ 2450.598286] clone_mnt+0x6c/0xce0 [ 2450.598952] copy_tree+0x3b0/0xa60 [ 2450.599628] copy_mnt_ns+0x144/0xa00 [ 2450.600286] ? kmem_cache_alloc+0x2a6/0x310 [ 2450.600994] create_new_namespaces+0xd6/0xb20 [ 2450.601538] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2450.601959] ksys_unshare+0x449/0x8a0 [ 2450.602411] ? unshare_fd+0x1c0/0x1c0 [ 2450.602732] ? fput_many+0x2f/0x1a0 [ 2450.603047] ? ksys_write+0x1a9/0x260 [ 2450.603488] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2450.603940] __x64_sys_unshare+0x2d/0x40 [ 2450.604368] do_syscall_64+0x33/0x40 [ 2450.604734] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2450.605865] RIP: 0033:0x7f8f4fbc7b19 [ 2450.606845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2450.611643] RSP: 002b:00007f8f4d13d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2450.614681] RAX: ffffffffffffffda RBX: 00007f8f4fcdaf60 RCX: 00007f8f4fbc7b19 [ 2450.616593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2450.618784] RBP: 00007f8f4d13d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2450.620558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2450.622269] R13: 00007ffca876f03f R14: 00007f8f4d13d300 R15: 0000000000022000 [ 2450.639987] FAULT_INJECTION: forcing a failure. [ 2450.639987] name failslab, interval 1, probability 0, space 0, times 0 [ 2450.641830] CPU: 1 PID: 13120 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2450.642514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2450.643261] Call Trace: [ 2450.643534] dump_stack+0x107/0x167 [ 2450.643849] should_fail.cold+0x5/0xa [ 2450.644243] ? alloc_vfsmnt+0x23/0x680 [ 2450.644644] should_failslab+0x5/0x20 [ 2450.644988] kmem_cache_alloc+0x5b/0x310 [ 2450.645470] ? copy_tree+0x61a/0xa60 [ 2450.645792] alloc_vfsmnt+0x23/0x680 [ 2450.646110] clone_mnt+0x6c/0xce0 [ 2450.646528] copy_tree+0x3b0/0xa60 [ 2450.646838] copy_mnt_ns+0x144/0xa00 [ 2450.647218] ? kmem_cache_alloc+0x2a6/0x310 [ 2450.647635] create_new_namespaces+0xd6/0xb20 [ 2450.648020] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2450.648569] ksys_unshare+0x449/0x8a0 [ 2450.648918] ? unshare_fd+0x1c0/0x1c0 [ 2450.650982] ? fput_many+0x2f/0x1a0 [ 2450.651412] ? ksys_write+0x1a9/0x260 [ 2450.651743] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2450.652253] __x64_sys_unshare+0x2d/0x40 [ 2450.652672] do_syscall_64+0x33/0x40 [ 2450.652994] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2450.653519] RIP: 0033:0x7f6b112f9b19 [ 2450.653835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2450.655588] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2450.656285] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 [ 2450.656948] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2450.657682] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2450.658412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2450.659008] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 06:26:57 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x5cf) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:26:57 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 89) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:26:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f00000014c0)={{}, "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"}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r5 = dup2(r3, r4) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000da0e0f18436b7a18ab4ef085ebb0000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb00000000000004000000000000002000"/136]) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100001d, 0x11, r5, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd=r5, 0x7, 0x9, 0x401, 0x1c, 0x0, {0x1}}, 0x7) fallocate(0xffffffffffffffff, 0x2a, 0x61f, 0x80000001) 06:26:57 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x751) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:26:57 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc00, 0xffffffffffffffff}, 0x0, 0x5, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) timer_gettime(0x0, &(0x7f0000000100)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) 06:26:57 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x751) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:26:57 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 83) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:26:57 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x3, 0x9, 0x0, 0xc3, 0x0, 0x1f, 0x10008, 0xa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000200)}, 0x6000, 0xef1, 0x7fffffff, 0x9, 0x9, 0x6, 0xba, 0x0, 0x20, 0x0, 0x4}, 0xffffffffffffffff, 0xb, r0, 0x3) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) r2 = memfd_create(&(0x7f0000000140)='\\$\'+-{-!\x00', 0x7) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0xf356, 0xffffff81, 0x7e, 0x101}) 06:26:57 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x2ff, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x81) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) 06:26:57 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 84) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:26:57 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x6, 0x4, 0xff, 0x3, 0x0, 0x271, 0x24010, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x9, 0x8}, 0x140, 0xc915, 0x5, 0x6, 0x3, 0x401, 0x7f, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xc, r0, 0x2) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000140)={0x0, 0x20, 0x4, @thr={&(0x7f00000001c0)="852f4ae5ab11ac1b9c791414182dbf6e3cfcf5d291f44363ffc5e986ca38a9c0ad07a930c4fd1ccba8093abf4726848666641452b70a90a47b2ea54a4909893d45a9390b08546ee801e09f54b8e4c71ecd860f1b56a381c91107", &(0x7f00000004c0)="78892648ccfe2391ed82111e90a0187ac8517180924159a2379a15823249f895f3b6fbf2382a19e0d07e1ef5fa061c23dd57751cb7b3cf43229a8f9e3d325506e0a30b4f86045b6fff6f16ecb925c8d8772c46dcb3cf2c391600a81bff74bba80c33a63b726ce66a15c34b218a1ea460cf7c0c7531caa3789a56c398bfc79f9bf0917293fa6f6b7415cfe96bf744dacde08c7cd52005077f34db7db1d136b6db809f5dbec36e36f2f6455d5fe12aa60749c895bdb03756ed8f336dccef9128e4ab50d023736576c197088480bb15d8470234cb751e554570bfe98c0a35f49abe"}}, &(0x7f00000002c0)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) [ 2450.871630] FAULT_INJECTION: forcing a failure. [ 2450.871630] name failslab, interval 1, probability 0, space 0, times 0 [ 2450.873278] CPU: 1 PID: 13145 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2450.873903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2450.874648] Call Trace: [ 2450.874895] dump_stack+0x107/0x167 [ 2450.875236] should_fail.cold+0x5/0xa [ 2450.875593] ? create_object.isra.0+0x3a/0xa20 [ 2450.876027] should_failslab+0x5/0x20 [ 2450.876382] kmem_cache_alloc+0x5b/0x310 [ 2450.876751] ? find_held_lock+0x2c/0x110 [ 2450.877155] create_object.isra.0+0x3a/0xa20 [ 2450.877571] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2450.878039] kmem_cache_alloc+0x159/0x310 [ 2450.878433] alloc_vfsmnt+0x23/0x680 [ 2450.878787] clone_mnt+0x6c/0xce0 [ 2450.879117] copy_tree+0x3b0/0xa60 [ 2450.879447] copy_mnt_ns+0x144/0xa00 [ 2450.879786] ? kmem_cache_alloc+0x2a6/0x310 [ 2450.880191] create_new_namespaces+0xd6/0xb20 [ 2450.880604] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2450.881074] ksys_unshare+0x449/0x8a0 [ 2450.881426] ? unshare_fd+0x1c0/0x1c0 [ 2450.881778] ? fput_many+0x2f/0x1a0 [ 2450.882115] ? ksys_write+0x1a9/0x260 [ 2450.882450] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2450.882938] __x64_sys_unshare+0x2d/0x40 [ 2450.883314] do_syscall_64+0x33/0x40 [ 2450.883667] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2450.884132] RIP: 0033:0x7f6b112f9b19 [ 2450.884474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2450.886132] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2450.886822] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 [ 2450.887474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2450.888127] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 06:26:57 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 90) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2450.888774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2450.889425] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 06:26:57 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @tid=r0}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000140)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) 06:26:57 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) 06:26:57 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x753) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:26:57 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000140)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) 06:26:57 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x5f0) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:26:57 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x753) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:26:57 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 91) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:26:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000014c0)={0x0, 0xffffffffffffffff, 0x1, [0x10000, 0x6, 0x8000, 0x9, 0xffffffffffffcbb6], [0xff, 0x2, 0x6, 0xffffffffffff8000, 0x0, 0x80000000, 0x9, 0x11, 0x7, 0x60055064, 0x3, 0x3, 0x200, 0x0, 0x401, 0x0, 0x2, 0xbb, 0x100000000, 0x9, 0x4, 0x4, 0xfffffffffffffffc, 0x7f, 0x1000, 0x9551, 0x7, 0x7, 0x3, 0x4f2, 0x6, 0x5, 0x3, 0xffffffffffffbad1, 0x80000001, 0xa8, 0x100000000, 0x5, 0x80000000, 0x3, 0x8, 0x2, 0x0, 0x8, 0x1fffe, 0x9, 0x9, 0x80000001, 0x217, 0x3, 0x5, 0x10001, 0x2, 0xfffffffffffffffb, 0x3ed, 0x4, 0x3, 0x4, 0x7, 0xfffffffffffffffe, 0x3cbdc161, 0x5, 0x6, 0x796, 0x80000000, 0x0, 0x2, 0x9, 0xfff, 0x1ff, 0x40, 0x80, 0xaf0, 0x6, 0x100, 0xfffffffffffffff9, 0x3, 0x6, 0x800, 0x6, 0x7fff, 0x200, 0x2, 0x5, 0x5, 0xaad5, 0x872, 0x7fe0000000, 0x0, 0xde6, 0x3, 0x6b4, 0x5, 0x0, 0x5, 0x3, 0x2, 0x7, 0x2, 0xc9, 0xffffffffffffff01, 0x0, 0x6, 0x6, 0x5, 0x7, 0x8, 0x0, 0xdde2, 0x100000001, 0x6, 0x7f, 0x2, 0xa84, 0x8, 0x1, 0x0, 0x2, 0x3, 0x2, 0x3ad]}) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x7, 0x1, 0x8000, 0x1, {{0x15, 0x4, 0x2, 0x1a, 0x54, 0x64, 0x0, 0x2, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x19}, {[@rr={0x7, 0xf, 0xab, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast]}, @timestamp_addr={0x44, 0xc, 0xe0, 0x1, 0x0, [{@remote, 0x400}]}, @ssrr={0x89, 0x23, 0x91, [@empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x14}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x28}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000002b00)=@newpolicy={0x11f4, 0x13, 0x300, 0x70bd2a, 0x25dfdbfe, {{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x13}, 0x4e20, 0x5, 0x4e24, 0x7604, 0x8, 0x80, 0x0, 0x67, r5, r6}, {0x8, 0x200, 0xa55, 0x3ff, 0x918, 0x80000001, 0x5, 0xffffffffffffffff}, {0x4, 0x8001, 0x2}, 0x8, 0x6e6bbe, 0x2, 0x0, 0x2, 0x2}, [@tmpl={0xc4, 0x5, [{{@in=@remote, 0x4d3, 0x2b}, 0x2, @in6=@loopback, 0x3503, 0x1, 0x1, 0x3, 0x6, 0x4, 0x101}, {{@in=@dev={0xac, 0x14, 0x14, 0xf}, 0x4d5, 0x6c}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3504, 0x3, 0x1, 0x9, 0x1, 0x1, 0x1ff}, {{@in=@broadcast, 0x4d2, 0xb12f977180a1b4c6}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3507, 0x0, 0x0, 0x40, 0x567119fa, 0x4, 0xfffffffb}]}, @lastused={0xc, 0xf, 0x1}, @algo_auth_trunc={0x1051, 0x14, {{'sha384-ssse3\x00'}, 0x8028, 0xa0, "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"}}, @lastused={0xc, 0xf, 0x3}, @mark={0xc, 0x15, {0x35075a, 0x80000001}}]}, 0x11f4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004090) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f00000003c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000800000020000000000000000000000000000000000000000027680000000000007b382c6800000000000000888bc316afed7333598f7b22151d77d383b9a3fe7221a6fb9a1e48a2d2fcee073881a4279ee652c4326c31c3943d3571b89160"]) [ 2450.982351] FAULT_INJECTION: forcing a failure. [ 2450.982351] name failslab, interval 1, probability 0, space 0, times 0 [ 2450.982369] CPU: 1 PID: 13154 Comm: syz-executor.0 Not tainted 5.10.224 #1 [ 2450.982377] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2450.982382] Call Trace: [ 2450.982404] dump_stack+0x107/0x167 [ 2450.982421] should_fail.cold+0x5/0xa [ 2450.982441] ? create_object.isra.0+0x3a/0xa20 [ 2450.982464] should_failslab+0x5/0x20 [ 2450.982483] kmem_cache_alloc+0x5b/0x310 06:26:57 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 92) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2450.982499] ? find_held_lock+0x2c/0x110 [ 2450.982518] create_object.isra.0+0x3a/0xa20 06:26:57 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x20001, &(0x7f00000005c0)=ANY=[@ANYBLOB="747261a8e4fa242295be42e48c6f6a2c7266646e6f3dc343018e0d2b150400301919cf7da861ef5b29bb365c6483c873d8a8c4cb0861199688305b0b9aeaf36d6931f6410ee6920c9f73b859fc001f55995a6591bf4ad3cc27d2b3070c2e9d538956bf7a41aa2997483c6c9f975e22021d93873c9a0000000000006b4e73908676a1d97f2fe0e141ce672e568cd1a5590ca3e26b3f5b50604031221f72a0c0982a47914052808cc8c1c387cc7024aee8", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',posixacl,version=9p2000.L,appraise,\x00']) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x280a9, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@cache_none}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@uid_lt={'uid<', r2}}, {@appraise_type}, {@uid_lt={'uid<', 0xee00}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@obj_role}, {@measure}]}}) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x1, &(0x7f0000000100)={0x0, 0x1, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r3, &(0x7f0000000080)=""/65, 0x41) [ 2450.982534] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2450.982554] kmem_cache_alloc+0x159/0x310 [ 2450.982578] alloc_vfsmnt+0x23/0x680 [ 2450.982595] clone_mnt+0x6c/0xce0 [ 2450.982623] copy_tree+0x3b0/0xa60 [ 2450.982646] copy_mnt_ns+0x144/0xa00 [ 2450.982664] ? kmem_cache_alloc+0x2a6/0x310 [ 2450.982686] create_new_namespaces+0xd6/0xb20 [ 2450.982709] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2450.982730] ksys_unshare+0x449/0x8a0 06:26:57 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) timer_create(0x3, &(0x7f0000000140)={0x0, 0x36, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000200), &(0x7f00000002c0)) [ 2450.982744] ? unshare_fd+0x1c0/0x1c0 [ 2450.982757] ? fput_many+0x2f/0x1a0 [ 2450.982775] ? ksys_write+0x1a9/0x260 [ 2450.982797] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2450.982815] __x64_sys_unshare+0x2d/0x40 [ 2450.982829] do_syscall_64+0x33/0x40 [ 2450.982843] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2450.982853] RIP: 0033:0x7f8f4fbc7b19 [ 2450.982868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2450.982876] RSP: 002b:00007f8f4d13d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2450.982892] RAX: ffffffffffffffda RBX: 00007f8f4fcdaf60 RCX: 00007f8f4fbc7b19 [ 2450.982901] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2450.982909] RBP: 00007f8f4d13d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2450.982917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2450.982926] R13: 00007ffca876f03f R14: 00007f8f4d13d300 R15: 0000000000022000 06:26:57 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d011c000000ffffffff00"], 0x14}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000480)={{r2, r3+60000000}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000200)) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x181000, 0x20) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, &(0x7f00000001c0)) timer_settime(r1, 0x1, &(0x7f0000000240)={{0x77359400}, {0x77359400}}, &(0x7f00000002c0)) read(r4, &(0x7f00000000c0)=""/100, 0xfffffffffffffefb) 06:26:57 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 93) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2451.250449] FAULT_INJECTION: forcing a failure. [ 2451.250449] name failslab, interval 1, probability 0, space 0, times 0 [ 2451.250467] CPU: 0 PID: 13181 Comm: syz-executor.0 Not tainted 5.10.224 #1 [ 2451.250476] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2451.250481] Call Trace: [ 2451.250502] dump_stack+0x107/0x167 [ 2451.250520] should_fail.cold+0x5/0xa [ 2451.250548] should_failslab+0x5/0x20 [ 2451.250570] __kmalloc_track_caller+0x79/0x370 [ 2451.250594] ? kstrdup_const+0x53/0x80 [ 2451.250614] kstrdup+0x36/0x70 [ 2451.250634] kstrdup_const+0x53/0x80 [ 2451.250656] alloc_vfsmnt+0xb5/0x680 [ 2451.250675] clone_mnt+0x6c/0xce0 [ 2451.250700] copy_tree+0x3b0/0xa60 [ 2451.250725] copy_mnt_ns+0x144/0xa00 [ 2451.250742] ? kmem_cache_alloc+0x2a6/0x310 [ 2451.250766] create_new_namespaces+0xd6/0xb20 [ 2451.250790] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2451.250812] ksys_unshare+0x449/0x8a0 [ 2451.250826] ? unshare_fd+0x1c0/0x1c0 [ 2451.250839] ? fput_many+0x2f/0x1a0 [ 2451.250860] ? ksys_write+0x1a9/0x260 [ 2451.250886] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2451.250905] __x64_sys_unshare+0x2d/0x40 [ 2451.250919] do_syscall_64+0x33/0x40 [ 2451.250935] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2451.250946] RIP: 0033:0x7f8f4fbc7b19 [ 2451.250961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2451.250969] RSP: 002b:00007f8f4d13d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2451.250987] RAX: ffffffffffffffda RBX: 00007f8f4fcdaf60 RCX: 00007f8f4fbc7b19 [ 2451.250997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2451.251005] RBP: 00007f8f4d13d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2451.251014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2451.251023] R13: 00007ffca876f03f R14: 00007f8f4d13d300 R15: 0000000000022000 [ 2451.348029] FAULT_INJECTION: forcing a failure. [ 2451.348029] name failslab, interval 1, probability 0, space 0, times 0 [ 2451.348052] CPU: 0 PID: 13192 Comm: syz-executor.0 Not tainted 5.10.224 #1 [ 2451.348060] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2451.348066] Call Trace: [ 2451.348087] dump_stack+0x107/0x167 [ 2451.348103] should_fail.cold+0x5/0xa [ 2451.348123] ? create_object.isra.0+0x3a/0xa20 [ 2451.348149] should_failslab+0x5/0x20 [ 2451.348170] kmem_cache_alloc+0x5b/0x310 [ 2451.348190] create_object.isra.0+0x3a/0xa20 [ 2451.348207] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2451.348227] __kmalloc_track_caller+0x177/0x370 [ 2451.348247] ? kstrdup_const+0x53/0x80 [ 2451.348267] kstrdup+0x36/0x70 [ 2451.348284] kstrdup_const+0x53/0x80 [ 2451.348303] alloc_vfsmnt+0xb5/0x680 [ 2451.348321] clone_mnt+0x6c/0xce0 [ 2451.348344] copy_tree+0x3b0/0xa60 [ 2451.348369] copy_mnt_ns+0x144/0xa00 [ 2451.348385] ? kmem_cache_alloc+0x2a6/0x310 [ 2451.348408] create_new_namespaces+0xd6/0xb20 [ 2451.348430] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2451.348450] ksys_unshare+0x449/0x8a0 [ 2451.348464] ? unshare_fd+0x1c0/0x1c0 [ 2451.348477] ? fput_many+0x2f/0x1a0 [ 2451.348495] ? ksys_write+0x1a9/0x260 [ 2451.348522] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2451.348540] __x64_sys_unshare+0x2d/0x40 [ 2451.348554] do_syscall_64+0x33/0x40 [ 2451.348570] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2451.348580] RIP: 0033:0x7f8f4fbc7b19 [ 2451.348595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2451.348603] RSP: 002b:00007f8f4d13d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2451.348620] RAX: ffffffffffffffda RBX: 00007f8f4fcdaf60 RCX: 00007f8f4fbc7b19 [ 2451.348629] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2451.348637] RBP: 00007f8f4d13d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2451.348646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2451.348655] R13: 00007ffca876f03f R14: 00007f8f4d13d300 R15: 0000000000022000 [ 2451.525185] FAULT_INJECTION: forcing a failure. [ 2451.525185] name failslab, interval 1, probability 0, space 0, times 0 [ 2451.525200] CPU: 0 PID: 13206 Comm: syz-executor.0 Not tainted 5.10.224 #1 [ 2451.525208] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2451.525212] Call Trace: [ 2451.525232] dump_stack+0x107/0x167 [ 2451.525246] should_fail.cold+0x5/0xa [ 2451.525264] ? create_object.isra.0+0x3a/0xa20 [ 2451.525286] should_failslab+0x5/0x20 [ 2451.525303] kmem_cache_alloc+0x5b/0x310 [ 2451.525320] create_object.isra.0+0x3a/0xa20 [ 2451.525346] kmemleak_alloc_percpu+0xa0/0x100 [ 2451.525367] pcpu_alloc+0x4e2/0x1240 [ 2451.525397] alloc_vfsmnt+0xfd/0x680 [ 2451.525414] clone_mnt+0x6c/0xce0 [ 2451.525436] copy_tree+0x3b0/0xa60 [ 2451.525459] copy_mnt_ns+0x144/0xa00 [ 2451.525482] ? kmem_cache_alloc+0x2a6/0x310 [ 2451.525505] create_new_namespaces+0xd6/0xb20 [ 2451.525527] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2451.525548] ksys_unshare+0x449/0x8a0 [ 2451.525561] ? unshare_fd+0x1c0/0x1c0 [ 2451.525573] ? fput_many+0x2f/0x1a0 [ 2451.525592] ? ksys_write+0x1a9/0x260 [ 2451.525624] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2451.525642] __x64_sys_unshare+0x2d/0x40 [ 2451.525654] do_syscall_64+0x33/0x40 [ 2451.525668] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2451.525678] RIP: 0033:0x7f8f4fbc7b19 [ 2451.525692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2451.525700] RSP: 002b:00007f8f4d13d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2451.525716] RAX: ffffffffffffffda RBX: 00007f8f4fcdaf60 RCX: 00007f8f4fbc7b19 [ 2451.525725] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2451.525732] RBP: 00007f8f4d13d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2451.525739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2451.525748] R13: 00007ffca876f03f R14: 00007f8f4d13d300 R15: 0000000000022000 06:26:58 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 85) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:26:58 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x200000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYBLOB="ffff000000000000020000000000000001000100000000000200070000000000000000000000000000800000000000000800000001000000ff7f000003000000000200000000000009000000000000000400000000000000070000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c5e532a3fff1ebac0e9e0281c5ac05b65339ec07c55cf71986675679ab0a4da964bbebb22c277d9e7ef4443c0237ca2bada76658035888617fad0019928b9eb93df5fe601a4294cae0ad634b802d3aba992fb925672280c0a81f903d819f6b00d7397e1da9ed8106ead42f837dab8ed8e8e93d9c4df9062384ffc88d59c1546966134e73376584fdd98cff346dd147c2e1b65ea9254765f8f12e2172ceccf803306423df9a222ee4ebdbb109913054cbfde800150c96fd5e6e8c59a93d7e27d216d8d6263c263a373eb17591d926a838baa6fc0d45f23c62df99d51ec4b6686868a872c8ccf"]) clock_gettime(0x0, &(0x7f0000000040)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r1, 0x29, 0x18, 0x0, &(0x7f0000000000)) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000002c0)={0x6, 0x7, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x4, 0x6, [0x8]}}, @ra={0x5, 0x2, 0x1}, @generic={0x7, 0x1d, "9de96d133a2a8b3662d944fcf844ead9e1851df4c0585118ee5c9410fb"}, @jumbo={0xc2, 0x4, 0x7}, @ra]}, 0x48) ioctl$CDROMEJECT(0xffffffffffffffff, 0x5309) clock_gettime(0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14b0006d59ff17ef768175da0cb74875fdbba565c6844071a76cb33c9c4362eb4bd10e5259ba0b1329490331fdbca8fee10cc2a5b1ffedd040db67a65501de96e01ed6ea106f1fc508bcf265b9a4479730065b9f5621a1b693b275b5318ef250233e8b1944af88d807b83c441861afafbb09706f2440e6db0000000000"], 0x14}}, 0x0) read(r2, &(0x7f0000000080)=""/65, 0x41) 06:26:58 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000480)={{r2, r3+60000000}, {0x0, 0x989680}}, 0x0) timer_create(0x7, &(0x7f0000000100)={0x0, 0x1f, 0x2}, &(0x7f0000000200)=0x0) timer_gettime(r4, &(0x7f00000001c0)) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) 06:26:58 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 94) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2451.766577] FAULT_INJECTION: forcing a failure. [ 2451.766577] name failslab, interval 1, probability 0, space 0, times 0 [ 2451.767840] CPU: 0 PID: 13213 Comm: syz-executor.0 Not tainted 5.10.224 #1 [ 2451.768562] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2451.769480] Call Trace: [ 2451.769780] dump_stack+0x107/0x167 [ 2451.770178] should_fail.cold+0x5/0xa [ 2451.770585] ? create_object.isra.0+0x3a/0xa20 [ 2451.771093] should_failslab+0x5/0x20 [ 2451.771510] kmem_cache_alloc+0x5b/0x310 [ 2451.771964] ? mark_held_locks+0x9e/0xe0 [ 2451.772417] create_object.isra.0+0x3a/0xa20 [ 2451.772928] kmemleak_alloc_percpu+0xa0/0x100 [ 2451.773413] pcpu_alloc+0x4e2/0x1240 [ 2451.774146] alloc_vfsmnt+0xfd/0x680 [ 2451.774541] clone_mnt+0x6c/0xce0 [ 2451.774929] copy_tree+0x3b0/0xa60 [ 2451.775310] copy_mnt_ns+0x144/0xa00 [ 2451.775711] ? kmem_cache_alloc+0x2a6/0x310 [ 2451.776164] create_new_namespaces+0xd6/0xb20 [ 2451.776650] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2451.777176] ksys_unshare+0x449/0x8a0 [ 2451.777592] ? unshare_fd+0x1c0/0x1c0 [ 2451.778012] ? fput_many+0x2f/0x1a0 [ 2451.778431] ? ksys_write+0x1a9/0x260 [ 2451.778858] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2451.779434] __x64_sys_unshare+0x2d/0x40 [ 2451.779880] do_syscall_64+0x33/0x40 [ 2451.780284] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2451.780832] RIP: 0033:0x7f8f4fbc7b19 [ 2451.781239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2451.783157] RSP: 002b:00007f8f4d13d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2451.783909] RAX: ffffffffffffffda RBX: 00007f8f4fcdaf60 RCX: 00007f8f4fbc7b19 [ 2451.785609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2451.786551] RBP: 00007f8f4d13d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2451.787260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2451.787984] R13: 00007ffca876f03f R14: 00007f8f4d13d300 R15: 0000000000022000 06:26:58 executing program 3: timer_delete(0x0) timer_create(0x3, &(0x7f0000000140)={0x0, 0x7, 0x1, @thr={&(0x7f00000002c0)="735d2daebaa9c109047e40476a6d9374ba15a0d7ac0f5f8ec5209a767e4bf3435159290e1a3469f7f8f8edcb33e7ef9bb73197c61c0d6ea1a11c8f78480827e09c39cf4421ea1fc5e1e219f68c700bfb777d2ce029e762d1493f9ed031b225567ca6d23b882e80b484a6f9493e799a04c44f6ef7b8ec40716910cfdd626d8ad27f59273076746d7ecb0aa84fd0c1784b876e1600974a89b3bfcb9aae380818d616c1954a8f7c52799c30d1dbec6aa14847685184f1c04897bcbe5bdf7eab5e78091b7fbee53bf470b6ee391eeb47aeb49ac96cb8cd6d4f591f433f", &(0x7f0000000100)="68d1e4dd44d1bc4140ac212b6b208ea20ade6e880063d3f987ab45b80426c76c87a815bbbabba029145699df2d08de635e54"}}, &(0x7f00000001c0)=0x0) timer_gettime(r0, &(0x7f0000000200)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00ad4619da38417fd59a6df0612f5c97473d99e276c8f6fb0f1e33baf9dce65d5b4dfdda45d24f0b65c8ad6fe3eabb509e1cd7232b5e56ae68daea18ae3ee18e2a7d75180dd2825268a1dd904cbd35b0b3246ec7a900000000000000"], 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) [ 2451.879453] FAULT_INJECTION: forcing a failure. [ 2451.879453] name failslab, interval 1, probability 0, space 0, times 0 [ 2451.880534] CPU: 0 PID: 13216 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2451.881181] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2451.881921] Call Trace: [ 2451.882176] dump_stack+0x107/0x167 [ 2451.882515] should_fail.cold+0x5/0xa [ 2451.882877] should_failslab+0x5/0x20 [ 2451.883238] __kmalloc_track_caller+0x79/0x370 [ 2451.883663] ? kstrdup_const+0x53/0x80 [ 2451.884028] kstrdup+0x36/0x70 [ 2451.884345] kstrdup_const+0x53/0x80 [ 2451.884699] alloc_vfsmnt+0xb5/0x680 [ 2451.885088] clone_mnt+0x6c/0xce0 [ 2451.885482] copy_tree+0x3b0/0xa60 [ 2451.885884] copy_mnt_ns+0x144/0xa00 [ 2451.886279] ? kmem_cache_alloc+0x2a6/0x310 [ 2451.886745] create_new_namespaces+0xd6/0xb20 [ 2451.887221] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2451.887746] ksys_unshare+0x449/0x8a0 [ 2451.888148] ? unshare_fd+0x1c0/0x1c0 [ 2451.888718] ? fput_many+0x2f/0x1a0 [ 2451.889075] ? ksys_write+0x1a9/0x260 [ 2451.889448] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2451.889888] __x64_sys_unshare+0x2d/0x40 [ 2451.890227] do_syscall_64+0x33/0x40 [ 2451.890541] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2451.891004] RIP: 0033:0x7f6b112f9b19 [ 2451.891368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2451.893127] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2451.893846] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 [ 2451.895345] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2451.896070] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2451.896792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2451.897502] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 [ 2466.596190] FAULT_INJECTION: forcing a failure. [ 2466.596190] name failslab, interval 1, probability 0, space 0, times 0 [ 2466.598398] CPU: 1 PID: 13236 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2466.598985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2466.599677] Call Trace: [ 2466.599910] dump_stack+0x107/0x167 [ 2466.600220] should_fail.cold+0x5/0xa [ 2466.600554] ? create_object.isra.0+0x3a/0xa20 [ 2466.600949] should_failslab+0x5/0x20 [ 2466.601768] kmem_cache_alloc+0x5b/0x310 [ 2466.602652] create_object.isra.0+0x3a/0xa20 [ 2466.603880] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 06:27:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000340)="ec7633ec5ae7a2d8bba124d05a67d9be43f6497e13646b82c96408435074fdce6f20c992a9b3de3d6269281cbcaee3e3553b86daf68b6b34a20f3c9fc4c5b90bdd4e87643674f84d40ecef340f06c6a0bd2a9301bbbcf4a2724e80040d2ba7bbf4ac739b4ecd8a9042fa1ceadec7917e1a64451119a4c2ecc2e96fe87c5b641883c5933d9c61f98f2e4d33ce6792d45e4ed1a657889d0a3ac0408937437e9d208478687f5402b76d21e1a5c81925e27bba31dfde12eefa25a2d8a5ffd9c48e8e564dd252f3baf90cd586667a8ea3232de6fa") r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in=@multicast1, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="000000000000000074000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbff03000000000000009cbb00000000000004000000000000002000000000000000000000000000000000000000007b382c6800"/135]) 06:27:13 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 95) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:27:13 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x774) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:27:13 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001600010d0017000300ffffffff00b2f2cd"], 0x14}}, 0x0) read(r4, &(0x7f0000000080)=""/65, 0x41) 06:27:13 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 86) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:27:13 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x5f2) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:27:13 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) 06:27:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x774) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 2466.605286] __kmalloc_track_caller+0x177/0x370 [ 2466.607351] ? kstrdup_const+0x53/0x80 [ 2466.608251] kstrdup+0x36/0x70 [ 2466.608937] kstrdup_const+0x53/0x80 [ 2466.609835] alloc_vfsmnt+0xb5/0x680 [ 2466.610686] clone_mnt+0x6c/0xce0 [ 2466.611495] copy_tree+0x3b0/0xa60 [ 2466.612321] copy_mnt_ns+0x144/0xa00 [ 2466.613140] ? kmem_cache_alloc+0x2a6/0x310 [ 2466.614139] create_new_namespaces+0xd6/0xb20 [ 2466.615195] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2466.616314] ksys_unshare+0x449/0x8a0 [ 2466.617240] ? unshare_fd+0x1c0/0x1c0 [ 2466.618054] ? fput_many+0x2f/0x1a0 [ 2466.618914] ? ksys_write+0x1a9/0x260 [ 2466.619793] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2466.620974] __x64_sys_unshare+0x2d/0x40 [ 2466.621924] do_syscall_64+0x33/0x40 [ 2466.622782] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2466.623957] RIP: 0033:0x7f6b112f9b19 [ 2466.624807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2466.629026] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2466.630807] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 [ 2466.632466] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2466.634105] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2466.635738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2466.637402] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 [ 2466.666573] FAULT_INJECTION: forcing a failure. [ 2466.666573] name failslab, interval 1, probability 0, space 0, times 0 [ 2466.667677] CPU: 0 PID: 13247 Comm: syz-executor.0 Not tainted 5.10.224 #1 [ 2466.668321] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2466.669127] Call Trace: [ 2466.669702] dump_stack+0x107/0x167 [ 2466.670049] should_fail.cold+0x5/0xa [ 2466.670410] ? alloc_vfsmnt+0x23/0x680 [ 2466.670789] should_failslab+0x5/0x20 [ 2466.671150] kmem_cache_alloc+0x5b/0x310 [ 2466.671531] ? copy_tree+0x61a/0xa60 [ 2466.671884] alloc_vfsmnt+0x23/0x680 [ 2466.672229] clone_mnt+0x6c/0xce0 [ 2466.672561] copy_tree+0x3b0/0xa60 [ 2466.672905] copy_mnt_ns+0x144/0xa00 [ 2466.673290] ? kmem_cache_alloc+0x2a6/0x310 [ 2466.673707] create_new_namespaces+0xd6/0xb20 [ 2466.674134] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2466.674614] ksys_unshare+0x449/0x8a0 [ 2466.674971] ? unshare_fd+0x1c0/0x1c0 [ 2466.675328] ? fput_many+0x2f/0x1a0 [ 2466.675679] ? ksys_write+0x1a9/0x260 [ 2466.676051] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2466.676538] __x64_sys_unshare+0x2d/0x40 [ 2466.676917] do_syscall_64+0x33/0x40 [ 2466.677292] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2466.677769] RIP: 0033:0x7f8f4fbc7b19 [ 2466.678120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2466.682152] RSP: 002b:00007f8f4d13d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2466.683775] RAX: ffffffffffffffda RBX: 00007f8f4fcdaf60 RCX: 00007f8f4fbc7b19 [ 2466.685350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2466.686022] RBP: 00007f8f4d13d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2466.686682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2466.687345] R13: 00007ffca876f03f R14: 00007f8f4d13d300 R15: 0000000000022000 06:27:13 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 96) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:27:13 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 87) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2466.879993] FAULT_INJECTION: forcing a failure. [ 2466.879993] name failslab, interval 1, probability 0, space 0, times 0 [ 2466.882656] CPU: 0 PID: 13266 Comm: syz-executor.0 Not tainted 5.10.224 #1 [ 2466.884149] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2466.884153] Call Trace: [ 2466.884173] dump_stack+0x107/0x167 [ 2466.884186] should_fail.cold+0x5/0xa [ 2466.884202] ? create_object.isra.0+0x3a/0xa20 [ 2466.884221] should_failslab+0x5/0x20 [ 2466.884238] kmem_cache_alloc+0x5b/0x310 [ 2466.884251] ? find_held_lock+0x2c/0x110 [ 2466.884265] create_object.isra.0+0x3a/0xa20 [ 2466.884278] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2466.884293] kmem_cache_alloc+0x159/0x310 [ 2466.884312] alloc_vfsmnt+0x23/0x680 [ 2466.884328] clone_mnt+0x6c/0xce0 [ 2466.884349] copy_tree+0x3b0/0xa60 [ 2466.884371] copy_mnt_ns+0x144/0xa00 [ 2466.884386] ? kmem_cache_alloc+0x2a6/0x310 [ 2466.884406] create_new_namespaces+0xd6/0xb20 [ 2466.884427] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2466.884445] ksys_unshare+0x449/0x8a0 [ 2466.884459] ? unshare_fd+0x1c0/0x1c0 [ 2466.884470] ? fput_many+0x2f/0x1a0 [ 2466.884486] ? ksys_write+0x1a9/0x260 [ 2466.884508] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2466.884524] __x64_sys_unshare+0x2d/0x40 [ 2466.884535] do_syscall_64+0x33/0x40 [ 2466.884547] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2466.884555] RIP: 0033:0x7f8f4fbc7b19 [ 2466.884568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2466.884574] RSP: 002b:00007f8f4d13d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2466.884587] RAX: ffffffffffffffda RBX: 00007f8f4fcdaf60 RCX: 00007f8f4fbc7b19 [ 2466.884594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2466.884601] RBP: 00007f8f4d13d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2466.884607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2466.884614] R13: 00007ffca876f03f R14: 00007f8f4d13d300 R15: 0000000000022000 [ 2466.899807] FAULT_INJECTION: forcing a failure. [ 2466.899807] name failslab, interval 1, probability 0, space 0, times 0 [ 2466.899821] CPU: 1 PID: 13265 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2466.899828] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2466.899832] Call Trace: [ 2466.899846] dump_stack+0x107/0x167 [ 2466.899859] should_fail.cold+0x5/0xa [ 2466.899873] ? create_object.isra.0+0x3a/0xa20 [ 2466.899890] should_failslab+0x5/0x20 [ 2466.899904] kmem_cache_alloc+0x5b/0x310 [ 2466.899920] create_object.isra.0+0x3a/0xa20 [ 2466.899939] kmemleak_alloc_percpu+0xa0/0x100 [ 2466.899955] pcpu_alloc+0x4e2/0x1240 [ 2466.899980] alloc_vfsmnt+0xfd/0x680 [ 2466.899994] clone_mnt+0x6c/0xce0 [ 2466.900013] copy_tree+0x3b0/0xa60 [ 2466.900031] copy_mnt_ns+0x144/0xa00 [ 2466.900046] ? kmem_cache_alloc+0x2a6/0x310 [ 2466.900063] create_new_namespaces+0xd6/0xb20 [ 2466.900081] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2466.900100] ksys_unshare+0x449/0x8a0 [ 2466.900112] ? unshare_fd+0x1c0/0x1c0 [ 2466.900122] ? fput_many+0x2f/0x1a0 [ 2466.900137] ? ksys_write+0x1a9/0x260 [ 2466.900157] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2466.900172] __x64_sys_unshare+0x2d/0x40 [ 2466.900182] do_syscall_64+0x33/0x40 [ 2466.900194] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2466.900202] RIP: 0033:0x7f6b112f9b19 [ 2466.900215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2466.900222] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2466.900236] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 [ 2466.900243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2466.900250] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2466.900257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2466.900265] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 06:27:27 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x777) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:27:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000006700)={&(0x7f0000006640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000066c0)={&(0x7f0000006680)={0x1c, 0x42, 0x200, 0x70bd2c, 0x0, {0x3}, [@typed={0x5, 0x5a, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) unshare(0x48020200) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000063c0)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/146, 0x92}, {&(0x7f0000000000)=""/14, 0xe}, {&(0x7f0000000400)=""/188, 0xbc}, {&(0x7f00000024c0)=""/149, 0x95}, {&(0x7f0000002580)=""/82, 0x52}, {&(0x7f0000002600)=""/81, 0x51}, {&(0x7f0000002680)=""/181, 0xb5}, {&(0x7f0000002740)=""/31, 0x1f}], 0x9, &(0x7f0000002840)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f00000028c0)=""/17, 0x11}, {&(0x7f0000002900)}], 0x2, &(0x7f0000002980)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002a00)=@abs, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000002a80)=""/120, 0x78}, {&(0x7f0000002b00)=""/157, 0x9d}, {&(0x7f0000002bc0)=""/44, 0x2c}, {&(0x7f0000002c00)=""/153, 0x99}, {&(0x7f0000002cc0)=""/241, 0xf1}, {&(0x7f0000002dc0)=""/140, 0x8c}], 0x6}}, {{&(0x7f0000002f00), 0x6e, &(0x7f0000003380)=[{&(0x7f0000002f80)=""/53, 0x35}, {&(0x7f0000002fc0)=""/16, 0x10}, {&(0x7f0000003000)=""/248, 0xf8}, {&(0x7f0000003100)=""/245, 0xf5}, {&(0x7f0000003200)=""/136, 0x88}, {&(0x7f00000032c0)=""/126, 0x7e}, {&(0x7f0000003340)=""/5, 0x5}], 0x7, &(0x7f0000003400)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000003440), 0x6e, &(0x7f0000003600)=[{&(0x7f00000034c0)=""/15, 0xf}, {&(0x7f0000003500)=""/78, 0x4e}, {&(0x7f0000003580)=""/29, 0x1d}, {&(0x7f00000035c0)=""/26, 0x1a}], 0x4, &(0x7f0000003640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000003700)=""/244, 0xf4}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/192, 0xc0}, {&(0x7f00000048c0)=""/7, 0x7}, {&(0x7f0000004900)=""/69, 0x45}], 0x5, &(0x7f0000004a00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000004a40)=@abs, 0x6e, &(0x7f0000004f80)=[{&(0x7f0000004ac0)=""/183, 0xb7}, {&(0x7f0000004b80)=""/110, 0x6e}, {&(0x7f0000004c00)=""/180, 0xb4}, {&(0x7f0000004cc0)=""/216, 0xd8}, {&(0x7f0000004dc0)=""/180, 0xb4}, {&(0x7f0000004e80)=""/234, 0xea}], 0x6, &(0x7f0000005000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x100}}, {{0x0, 0x0, &(0x7f0000005140)=[{&(0x7f0000005100)=""/26, 0x1a}], 0x1, &(0x7f0000005180)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000005200)=@abs, 0x6e, &(0x7f00000062c0)=[{&(0x7f0000005280)=""/4096, 0x1000}, {&(0x7f0000006280)=""/21, 0x15}], 0x2, &(0x7f0000006300)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}], 0x9, 0x60, &(0x7f0000006600)={0x0, 0x3938700}) r4 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000002900), 0x9}, 0x10000, 0x20, 0x5, 0x0, 0x400, 0x800, 0x3f}, r3, 0x1, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:27:27 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x1, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) 06:27:27 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x777) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 2480.606457] FAULT_INJECTION: forcing a failure. [ 2480.606457] name failslab, interval 1, probability 0, space 0, times 0 [ 2480.607513] CPU: 1 PID: 13291 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2480.608099] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2480.608792] Call Trace: [ 2480.609027] dump_stack+0x107/0x167 [ 2480.609694] should_fail.cold+0x5/0xa [ 2480.610032] ? create_object.isra.0+0x3a/0xa20 [ 2480.610432] should_failslab+0x5/0x20 [ 2480.610765] kmem_cache_alloc+0x5b/0x310 [ 2480.611115] ? mark_held_locks+0x9e/0xe0 [ 2480.611469] create_object.isra.0+0x3a/0xa20 [ 2480.611853] kmemleak_alloc_percpu+0xa0/0x100 [ 2480.612239] pcpu_alloc+0x4e2/0x1240 [ 2480.612571] alloc_vfsmnt+0xfd/0x680 [ 2480.612898] clone_mnt+0x6c/0xce0 [ 2480.613232] copy_tree+0x3b0/0xa60 [ 2480.614013] copy_mnt_ns+0x144/0xa00 [ 2480.614337] ? kmem_cache_alloc+0x2a6/0x310 [ 2480.614712] create_new_namespaces+0xd6/0xb20 [ 2480.615100] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2480.615519] ksys_unshare+0x449/0x8a0 [ 2480.615853] ? unshare_fd+0x1c0/0x1c0 [ 2480.616179] ? fput_many+0x2f/0x1a0 [ 2480.616493] ? ksys_write+0x1a9/0x260 [ 2480.616825] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2480.617467] __x64_sys_unshare+0x2d/0x40 [ 2480.618355] do_syscall_64+0x33/0x40 [ 2480.619168] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2480.620308] RIP: 0033:0x7f6b112f9b19 [ 2480.621120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2480.625169] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2480.626824] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 06:27:27 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000480)={{r2, r3+60000000}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f00000001c0)={{r4, r5+60000000}, {r6, r7+60000000}}, 0x0) 06:27:27 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 97) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:27:27 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 88) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:27:27 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x613) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2480.628380] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2480.637691] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2480.638290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2480.638893] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 [ 2480.701316] FAULT_INJECTION: forcing a failure. [ 2480.701316] name failslab, interval 1, probability 0, space 0, times 0 [ 2480.701353] CPU: 0 PID: 13292 Comm: syz-executor.0 Not tainted 5.10.224 #1 [ 2480.701361] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2480.701366] Call Trace: [ 2480.701387] dump_stack+0x107/0x167 [ 2480.701402] should_fail.cold+0x5/0xa [ 2480.701428] should_failslab+0x5/0x20 [ 2480.701450] __kmalloc_track_caller+0x79/0x370 [ 2480.701472] ? kstrdup_const+0x53/0x80 [ 2480.701489] kstrdup+0x36/0x70 06:27:27 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000480)={{r0, r1+10000000}, {0x0, 0x3938700}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r2, &(0x7f0000000080)=""/65, 0x41) [ 2480.701503] kstrdup_const+0x53/0x80 [ 2480.701560] alloc_vfsmnt+0xb5/0x680 [ 2480.701577] clone_mnt+0x6c/0xce0 [ 2480.701595] copy_tree+0x3b0/0xa60 [ 2480.701618] copy_mnt_ns+0x144/0xa00 [ 2480.701632] ? kmem_cache_alloc+0x2a6/0x310 [ 2480.701651] create_new_namespaces+0xd6/0xb20 [ 2480.701668] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2480.701685] ksys_unshare+0x449/0x8a0 [ 2480.701697] ? unshare_fd+0x1c0/0x1c0 [ 2480.701708] ? fput_many+0x2f/0x1a0 [ 2480.701727] ? ksys_write+0x1a9/0x260 [ 2480.701749] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2480.701763] __x64_sys_unshare+0x2d/0x40 [ 2480.701775] do_syscall_64+0x33/0x40 [ 2480.701788] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2480.701797] RIP: 0033:0x7f8f4fbc7b19 [ 2480.701810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:27:27 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 98) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2480.701816] RSP: 002b:00007f8f4d13d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2480.701830] RAX: ffffffffffffffda RBX: 00007f8f4fcdaf60 RCX: 00007f8f4fbc7b19 [ 2480.701838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2480.701845] RBP: 00007f8f4d13d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2480.701853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2480.701860] R13: 00007ffca876f03f R14: 00007f8f4d13d300 R15: 0000000000022000 [ 2480.840795] FAULT_INJECTION: forcing a failure. [ 2480.840795] name failslab, interval 1, probability 0, space 0, times 0 [ 2480.841968] CPU: 1 PID: 13308 Comm: syz-executor.0 Not tainted 5.10.224 #1 [ 2480.842555] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2480.843260] Call Trace: [ 2480.843496] dump_stack+0x107/0x167 [ 2480.843816] should_fail.cold+0x5/0xa [ 2480.844157] should_failslab+0x5/0x20 [ 2480.844499] __kmalloc_track_caller+0x79/0x370 [ 2480.844901] ? kstrdup_const+0x53/0x80 06:27:27 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x798) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 2480.845267] kstrdup+0x36/0x70 [ 2480.845555] kstrdup_const+0x53/0x80 [ 2480.845880] alloc_vfsmnt+0xb5/0x680 [ 2480.846204] clone_mnt+0x6c/0xce0 [ 2480.857304] copy_tree+0x3b0/0xa60 [ 2480.857614] copy_mnt_ns+0x144/0xa00 [ 2480.857935] ? kmem_cache_alloc+0x2a6/0x310 [ 2480.858305] create_new_namespaces+0xd6/0xb20 [ 2480.858693] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2480.859111] ksys_unshare+0x449/0x8a0 [ 2480.859431] ? unshare_fd+0x1c0/0x1c0 [ 2480.859751] ? fput_many+0x2f/0x1a0 [ 2480.860063] ? ksys_write+0x1a9/0x260 [ 2480.860394] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2480.860835] __x64_sys_unshare+0x2d/0x40 [ 2480.861184] do_syscall_64+0x33/0x40 [ 2480.861505] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2480.861932] RIP: 0033:0x7f8f4fbc7b19 [ 2480.862247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2480.863776] RSP: 002b:00007f8f4d13d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2480.864412] RAX: ffffffffffffffda RBX: 00007f8f4fcdaf60 RCX: 00007f8f4fbc7b19 [ 2480.865006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2480.865625] RBP: 00007f8f4d13d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2480.866220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2480.866819] R13: 00007ffca876f03f R14: 00007f8f4d13d300 R15: 0000000000022000 06:27:40 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 89) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:27:40 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x79a) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:27:40 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x798) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:27:40 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x615) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:27:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000340)={0x6, 0x2, 0x200, 0x3, 0xc, "062517fe9999d0a8"}) dup2(r3, r4) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:27:40 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) timer_create(0x1, &(0x7f0000000180)={0x0, 0x4, 0x1, @thr={&(0x7f00000002c0)="2e4d27b1ed26baf68c5463d578e9818286fdda38f2f0b90cabac447cd648c600508f4ae35e0e506ee40393bef0f1315e390a95729c09564e2010a43de6e8ebadb5ab87fafbd1b66ca5f01d4975d7961bbee7e8e5ceddb5e27ecd9e2019", &(0x7f0000000340)="9b167464441610cb6c54362e3a52b1b0d9636f9fe03c8ca14560f1978efbe9791e641928fb74b133106c05a246b5ff52302bc7feb1dfbb88fa9cedf24dee2deba26f17441e66b713e91a6b225e56d768866ef65f21c10840f596736b9bb997757f378c9d745452a45a9c49178e42d28be55b3805a7c2f84051c4df7d0687d9a3cddc2ef607733616f2468b4ffbf38290d9852473dcdf43c0eecc9cb140d5594b64b7fbe624fed3dccbf3482f1f129b0edda299b2b0db547d10e918cfecdad6a282d7"}}, &(0x7f0000000240)=0x0) timer_gettime(r1, &(0x7f0000000440)) timer_gettime(r1, &(0x7f0000000200)) capset(&(0x7f0000000140)={0x20071026, 0xffffffffffffffff}, &(0x7f00000001c0)={0x8ff, 0x20, 0x10000, 0x7, 0x80000001, 0x5440}) 06:27:41 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 99) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:27:41 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000480)={{r0, r1+60000000}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x989680}}, &(0x7f0000000340)) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000480)={{r3, r4+60000000}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timer_settime(r5, 0x0, &(0x7f0000000480)={{r6, r7+60000000}, {0x0, 0x989680}}, 0x0) timer_create(0x5, &(0x7f0000000240)={0x0, 0x33, 0x0, @thr={&(0x7f00000001c0)="da468284ff5c65b95f536d29457925cf519c652b78a2606269903a071e4c9ae7be291a1aee4dcd41bedce15e5c9ec7810d354b44c0aa137851361e897b090d49bf450c1c24804b2962253d128d42b7670b1601a84c90a31ee5bfe547c628fbb96304", &(0x7f0000000140)="0b3d2624954e3cec7d21e1ed"}}, &(0x7f00000002c0)=0x0) timer_gettime(r8, &(0x7f0000000100)) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001600010d000000a99fc0f3ffff00d2a7c02ee2d4e011e3e5723634305daca83d75503f614fc5a19b1ba850f9614ce92053c1082cbceaf6b254d381b906406f166bf4d2c11f8d363d6dbf6e1584c360c750172fda84ddbcc55261179085c10d0cbc411bae333544b86e90bf50dd7f1c4fdf05bedfda4b18fb70701f3b10a8901417e9a99cdaa09575b6c4d8375b0ef8f0fe30a02cee22ce93d61e2aab81a08bcdc394424cf9bde44674fb05c9f67058f787f4e60ea9730c71608b4328"], 0x14}}, 0x0) read(r9, &(0x7f0000000080)=""/65, 0x41) [ 2494.499277] FAULT_INJECTION: forcing a failure. [ 2494.499277] name failslab, interval 1, probability 0, space 0, times 0 [ 2494.501462] CPU: 0 PID: 13328 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2494.502101] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2494.502856] Call Trace: [ 2494.503117] dump_stack+0x107/0x167 [ 2494.503485] should_fail.cold+0x5/0xa [ 2494.503852] ? alloc_vfsmnt+0x23/0x680 [ 2494.504229] should_failslab+0x5/0x20 [ 2494.504603] kmem_cache_alloc+0x5b/0x310 [ 2494.504987] ? copy_tree+0x61a/0xa60 [ 2494.505354] alloc_vfsmnt+0x23/0x680 [ 2494.505723] clone_mnt+0x6c/0xce0 [ 2494.506053] copy_tree+0x3b0/0xa60 [ 2494.506397] copy_mnt_ns+0x144/0xa00 [ 2494.506761] ? kmem_cache_alloc+0x2a6/0x310 [ 2494.507164] create_new_namespaces+0xd6/0xb20 [ 2494.507583] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2494.509134] ksys_unshare+0x449/0x8a0 [ 2494.509512] ? unshare_fd+0x1c0/0x1c0 [ 2494.509898] ? fput_many+0x2f/0x1a0 [ 2494.510240] ? ksys_write+0x1a9/0x260 [ 2494.510609] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2494.511118] __x64_sys_unshare+0x2d/0x40 [ 2494.511489] do_syscall_64+0x33/0x40 [ 2494.511838] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2494.512321] RIP: 0033:0x7f6b112f9b19 [ 2494.512661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2494.514356] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2494.515043] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 [ 2494.516776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2494.516786] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2494.516795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2494.516805] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 [ 2494.530594] FAULT_INJECTION: forcing a failure. [ 2494.530594] name failslab, interval 1, probability 0, space 0, times 0 [ 2494.530612] CPU: 0 PID: 13335 Comm: syz-executor.0 Not tainted 5.10.224 #1 [ 2494.530620] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2494.530625] Call Trace: [ 2494.530640] dump_stack+0x107/0x167 [ 2494.530655] should_fail.cold+0x5/0xa [ 2494.530671] ? create_object.isra.0+0x3a/0xa20 [ 2494.530689] should_failslab+0x5/0x20 [ 2494.530703] kmem_cache_alloc+0x5b/0x310 06:27:41 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x1, &(0x7f00000002c0)={0x0, 0x33, 0x1}, &(0x7f0000000300)=0x0) timer_gettime(r3, &(0x7f0000000440)) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{r1, r2+60000000}, {0x77359400}}, &(0x7f0000000200)) [ 2494.530723] create_object.isra.0+0x3a/0xa20 [ 2494.530747] kmemleak_alloc_percpu+0xa0/0x100 [ 2494.530767] pcpu_alloc+0x4e2/0x1240 [ 2494.530798] alloc_vfsmnt+0xfd/0x680 [ 2494.530816] clone_mnt+0x6c/0xce0 [ 2494.530840] copy_tree+0x3b0/0xa60 [ 2494.530864] copy_mnt_ns+0x144/0xa00 [ 2494.530901] ? kmem_cache_alloc+0x2a6/0x310 [ 2494.530922] create_new_namespaces+0xd6/0xb20 [ 2494.530945] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2494.530962] ksys_unshare+0x449/0x8a0 [ 2494.530977] ? unshare_fd+0x1c0/0x1c0 [ 2494.530990] ? fput_many+0x2f/0x1a0 [ 2494.531007] ? ksys_write+0x1a9/0x260 [ 2494.531030] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2494.531050] __x64_sys_unshare+0x2d/0x40 [ 2494.531062] do_syscall_64+0x33/0x40 [ 2494.531076] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2494.531086] RIP: 0033:0x7f8f4fbc7b19 [ 2494.531102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2494.531110] RSP: 002b:00007f8f4d13d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2494.531126] RAX: ffffffffffffffda RBX: 00007f8f4fcdaf60 RCX: 00007f8f4fbc7b19 [ 2494.531135] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2494.531144] RBP: 00007f8f4d13d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2494.531153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2494.531163] R13: 00007ffca876f03f R14: 00007f8f4d13d300 R15: 0000000000022000 06:27:41 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0xffcd, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000000010000d0000000300ffffffff000195c0b4ee391a87fd0abff554f613163f00253672d6e9bcf52bedb4266e4f6480a8c3375c0700b11b77445cfc9204e993add6603fb4d1e3fe0a404f7e3a3a3a34a188e1cf570455e7a7a307dc34182498cbdc33a0b0ca10a264a257c5d89208e1ebf679bc047f33dcf3ba79d4072833fa92cb43f66ab11e3009187e59f0a8de54e1"], 0x14}, 0x1, 0x0, 0x0, 0x7a55058c32b8fbc1}, 0x0) timer_create(0x3, &(0x7f0000000140)={0x0, 0x11, 0x4, @thr={&(0x7f0000000100)="7e886f07d1c0e2e30e95283be4de5e1d9cf6706f4c26a7d3491187e429a2889c5468", &(0x7f00000001c0)="08147833c3e7145d78b6249b4ffd2d13d235280e934d5cc1fed5f7ee19af121cd7f2a8e61085c522cbd1af6113bbb286a03cd84d613d57b7857b7845ef0453f7aedcf9337d23d7670961c3dadd363b5e0014fc6b414401"}}, &(0x7f0000000240)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) timer_gettime(0x0, &(0x7f00000007c0)) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000380)="0a2d2da2ef9ee479574e35e3ba64f870fe3898f364eddd8079caf5ae0616dffb698891ce445201982337c5a5bfa42703a314a7f82c9295b30351c6a696d1a7e173ab9cc9af1c5006e0044025e8868a8d1a199d7ed9857476d24dd0f9aa64d4fd35d60e125a3fe8970087fa53f87140bc6771deee3d032144161692536e78de9d5e7ea9018b4c8a352844ade27c0b847b013a69fb35e31382d99427d343e6b914ae7bca84796baedf2aa518fd74886f04d6f48ec7fdc5a1dcb9f193b46a2095f9b8c382aad5ae8afebdc22c157d85110db667e0c10dc6eabec0331261c3337731c637") ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r2, &(0x7f0000000080)='attr\x00') r3 = fork() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540)={0x0}, &(0x7f0000000580)=0xc) clone3(&(0x7f0000000600)={0x42001800, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), {0x12}, &(0x7f0000000380)=""/145, 0x91, &(0x7f00000004c0)=""/122, &(0x7f00000005c0)=[r2, 0x0, 0xffffffffffffffff, 0x0, 0x0, r3, r4], 0x7}, 0x58) read(r0, &(0x7f0000000080)=""/65, 0x41) 06:27:41 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:27:41 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 100) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2494.752950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4096 sclass=netlink_route_socket pid=13355 comm=syz-executor.3 [ 2494.768676] FAULT_INJECTION: forcing a failure. [ 2494.768676] name failslab, interval 1, probability 0, space 0, times 0 [ 2494.769730] CPU: 1 PID: 13358 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2494.770350] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2494.771100] Call Trace: [ 2494.771361] dump_stack+0x107/0x167 [ 2494.771699] should_fail.cold+0x5/0xa [ 2494.772031] ? alloc_vfsmnt+0x23/0x680 [ 2494.772369] should_failslab+0x5/0x20 [ 2494.772716] kmem_cache_alloc+0x5b/0x310 [ 2494.773096] ? copy_tree+0x61a/0xa60 [ 2494.773462] alloc_vfsmnt+0x23/0x680 [ 2494.773821] clone_mnt+0x6c/0xce0 [ 2494.774155] copy_tree+0x3b0/0xa60 [ 2494.774496] copy_mnt_ns+0x144/0xa00 [ 2494.774850] ? kmem_cache_alloc+0x2a6/0x310 [ 2494.775262] create_new_namespaces+0xd6/0xb20 [ 2494.775686] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2494.776143] ksys_unshare+0x449/0x8a0 [ 2494.776497] ? unshare_fd+0x1c0/0x1c0 [ 2494.776852] ? fput_many+0x2f/0x1a0 [ 2494.777197] ? ksys_write+0x1a9/0x260 [ 2494.777571] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2494.778051] __x64_sys_unshare+0x2d/0x40 [ 2494.778394] do_syscall_64+0x33/0x40 [ 2494.778713] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2494.779163] RIP: 0033:0x7f6b112f9b19 [ 2494.779503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:27:41 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0xffff, 0x2040) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) [ 2494.781103] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2494.781782] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 [ 2494.785894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2494.786530] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2494.787169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2494.787808] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 [ 2494.791526] FAULT_INJECTION: forcing a failure. [ 2494.791526] name failslab, interval 1, probability 0, space 0, times 0 [ 2494.792832] CPU: 0 PID: 13360 Comm: syz-executor.0 Not tainted 5.10.224 #1 [ 2494.793460] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2494.794227] Call Trace: [ 2494.794477] dump_stack+0x107/0x167 [ 2494.794815] should_fail.cold+0x5/0xa [ 2494.795185] ? create_object.isra.0+0x3a/0xa20 [ 2494.795614] should_failslab+0x5/0x20 [ 2494.795984] kmem_cache_alloc+0x5b/0x310 [ 2494.796362] create_object.isra.0+0x3a/0xa20 [ 2494.796770] kmemleak_alloc_percpu+0xa0/0x100 [ 2494.797198] pcpu_alloc+0x4e2/0x1240 [ 2494.797573] alloc_vfsmnt+0xfd/0x680 [ 2494.797920] clone_mnt+0x6c/0xce0 [ 2494.798272] copy_tree+0x3b0/0xa60 [ 2494.798606] copy_mnt_ns+0x144/0xa00 [ 2494.798955] ? kmem_cache_alloc+0x2a6/0x310 [ 2494.799376] create_new_namespaces+0xd6/0xb20 [ 2494.799769] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2494.800200] ksys_unshare+0x449/0x8a0 [ 2494.800544] ? unshare_fd+0x1c0/0x1c0 [ 2494.800889] ? fput_many+0x2f/0x1a0 [ 2494.801240] ? ksys_write+0x1a9/0x260 [ 2494.801620] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2494.802101] __x64_sys_unshare+0x2d/0x40 [ 2494.802481] do_syscall_64+0x33/0x40 [ 2494.802828] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2494.803291] RIP: 0033:0x7f8f4fbc7b19 [ 2494.803650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2494.805238] RSP: 002b:00007f8f4d13d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2494.805925] RAX: ffffffffffffffda RBX: 00007f8f4fcdaf60 RCX: 00007f8f4fbc7b19 [ 2494.806532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2494.807127] RBP: 00007f8f4d13d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2494.807731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2494.808323] R13: 00007ffca876f03f R14: 00007f8f4d13d300 R15: 0000000000022000 06:27:41 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000004c0)={0x0, 0x8}) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000300ffffffff0000000000200000"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) capset(&(0x7f0000000140)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x3, 0x9, 0x3, 0x84, 0x7f, 0x7fffffff}) 06:27:41 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x79a) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:27:41 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x636) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:27:41 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 91) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:27:41 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x7bb) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:27:41 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)=0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000010020000000504000000000000fbffffff040000000000020003000000000000009cbb0000000000000400000000000000200000000000000000000000000000000c0000000500000000000000007b382c6800000000000000"]) [ 2495.028991] FAULT_INJECTION: forcing a failure. [ 2495.028991] name failslab, interval 1, probability 0, space 0, times 0 [ 2495.029008] CPU: 0 PID: 13376 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2495.029017] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2495.029021] Call Trace: [ 2495.029043] dump_stack+0x107/0x167 [ 2495.029058] should_fail.cold+0x5/0xa [ 2495.029085] should_failslab+0x5/0x20 [ 2495.029106] __kmalloc_track_caller+0x79/0x370 [ 2495.029126] ? kstrdup_const+0x53/0x80 [ 2495.029145] kstrdup+0x36/0x70 [ 2495.029160] kstrdup_const+0x53/0x80 [ 2495.029178] alloc_vfsmnt+0xb5/0x680 [ 2495.029195] clone_mnt+0x6c/0xce0 [ 2495.029217] copy_tree+0x3b0/0xa60 [ 2495.029239] copy_mnt_ns+0x144/0xa00 [ 2495.029255] ? kmem_cache_alloc+0x2a6/0x310 [ 2495.029276] create_new_namespaces+0xd6/0xb20 [ 2495.029297] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2495.029315] ksys_unshare+0x449/0x8a0 [ 2495.029337] ? unshare_fd+0x1c0/0x1c0 [ 2495.029350] ? fput_many+0x2f/0x1a0 [ 2495.029369] ? ksys_write+0x1a9/0x260 [ 2495.029394] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2495.029411] __x64_sys_unshare+0x2d/0x40 [ 2495.029424] do_syscall_64+0x33/0x40 [ 2495.029438] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2495.029448] RIP: 0033:0x7f6b112f9b19 [ 2495.029462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2495.029471] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2495.029487] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 [ 2495.029495] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2495.029520] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2495.029529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2495.029538] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 [ 2495.567839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4096 sclass=netlink_route_socket pid=13392 comm=syz-executor.3 [ 2510.026770] FAULT_INJECTION: forcing a failure. [ 2510.026770] name failslab, interval 1, probability 0, space 0, times 0 [ 2510.028003] CPU: 0 PID: 13407 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2510.028700] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2510.029549] Call Trace: [ 2510.029821] dump_stack+0x107/0x167 [ 2510.030232] should_fail.cold+0x5/0xa [ 2510.030609] ? create_object.isra.0+0x3a/0xa20 [ 2510.031053] should_failslab+0x5/0x20 [ 2510.031481] kmem_cache_alloc+0x5b/0x310 [ 2510.031872] create_object.isra.0+0x3a/0xa20 [ 2510.032334] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2510.032821] __kmalloc_track_caller+0x177/0x370 [ 2510.033356] ? kstrdup_const+0x53/0x80 [ 2510.033756] kstrdup+0x36/0x70 [ 2510.034061] kstrdup_const+0x53/0x80 [ 2510.034468] alloc_vfsmnt+0xb5/0x680 [ 2510.034830] clone_mnt+0x6c/0xce0 [ 2510.035260] copy_tree+0x3b0/0xa60 [ 2510.035605] copy_mnt_ns+0x144/0xa00 [ 2510.035957] ? kmem_cache_alloc+0x2a6/0x310 [ 2510.036416] create_new_namespaces+0xd6/0xb20 [ 2510.036841] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2510.037384] ksys_unshare+0x449/0x8a0 [ 2510.037764] ? unshare_fd+0x1c0/0x1c0 [ 2510.038155] ? fput_many+0x2f/0x1a0 [ 2510.038511] ? ksys_write+0x1a9/0x260 [ 2510.041867] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2510.042324] __x64_sys_unshare+0x2d/0x40 [ 2510.042682] do_syscall_64+0x33/0x40 [ 2510.043003] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2510.043440] RIP: 0033:0x7f6b112f9b19 [ 2510.043766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2510.045309] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2510.045982] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 [ 2510.046592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2510.047196] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2510.047802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2510.048401] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 06:27:56 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:27:56 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x1e5c, &(0x7f00000001c0)={0x0, 0xebab, 0x0, 0x1, 0x261}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f00000002c0)) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x0) write$binfmt_elf64(r0, &(0x7f0000001e00)={{0x7f, 0x45, 0x4c, 0x46, 0xfd, 0x40, 0xcc, 0x5, 0x400, 0x2, 0x3e, 0x7f, 0x1f8, 0x40, 0x4, 0x5799, 0x72d, 0x38, 0x1, 0x1, 0x0, 0x5}, [{0x7, 0x10001, 0x2, 0x1f, 0x1, 0x0, 0x80, 0x8}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1978) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r2, &(0x7f0000000080)=""/65, 0x41) 06:27:56 executing program 3: timer_delete(0x0) timer_gettime(0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4dd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)=0x1) dup2(r0, r1) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) 06:27:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0xffffffffffffaf8a, 0xe711, 0x1, 0x14eb472, 0x2, [0x7fffffff, 0x1, 0x7fffffff, 0x101]}) dup2(r3, r4) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:27:56 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x7bb) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:27:56 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x638) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:27:56 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x7bd) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:27:56 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 92) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:27:56 executing program 3: timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x95, 0x7f, 0x1, 0x6, 0x0, 0x10001, 0x101, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x100, 0x5aa4, 0x1000, 0x3, 0x5, 0x3, 0x3, 0x0, 0x80000001, 0x0, 0x80000000}, 0x0, 0x2, r0, 0x3) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) 06:27:56 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) 06:28:10 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x7bd) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:28:10 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x7de) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:28:10 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020004) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:28:10 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}, 0x1, 0x0, 0x0, 0x2040004}, 0x14) read(r0, &(0x7f0000000080)=""/65, 0x41) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x20001, &(0x7f0000000740)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl}, {@version_L}], [{@appraise}]}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x125}, 0x14}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000140)=0xfff, 0x4) 06:28:10 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 93) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:28:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x8, 0x20, 0x0, 0x0, 0x0, 0xcf7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[]) 06:28:10 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x659) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:28:10 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)=0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) ioctl$sock_bt_hci(r2, 0x800448f0, &(0x7f0000000380)="0a2d2da2ef9ee479574e35e3ba64f870fe3898f364eddd8079caf5ae0616dffb698891ce445201982337c5a5bfa42703a314a7f82c9295b30351c6a696d1a7e173ab9cc9af1c5006e0044025e8868a8d1a199d7ed9857476d24dd0f9aa64d4fd35d60e125a3fe8970087fa53f87140bc6771deee3d032144161692536e78de9d5e7ea9018b4c8a352844ade27c0b847b013a69fb35e31382d99427d343e6b914ae7bca84796baedf2aa518fd74886f04d6f48ec7fdc5a1dcb9f193b46a2095f9b8c382aad5ae8afebdc22c157d85110db667e0c10dc6eabec0331261c3337731c637") ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r3, &(0x7f0000000080)='attr\x00') capset(&(0x7f00000001c0)={0x19980330, r3}, &(0x7f0000000200)={0x1f, 0xffffd66f, 0x7f, 0x1743, 0x62, 0x800}) read(r1, &(0x7f0000000100)=""/88, 0x58) [ 2523.887845] FAULT_INJECTION: forcing a failure. [ 2523.887845] name failslab, interval 1, probability 0, space 0, times 0 [ 2523.889030] CPU: 1 PID: 13454 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2523.889614] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2523.890347] Call Trace: [ 2523.890585] dump_stack+0x107/0x167 [ 2523.890899] should_fail.cold+0x5/0xa [ 2523.891230] ? create_object.isra.0+0x3a/0xa20 [ 2523.891626] should_failslab+0x5/0x20 [ 2523.891957] kmem_cache_alloc+0x5b/0x310 [ 2523.892306] create_object.isra.0+0x3a/0xa20 [ 2523.892688] kmemleak_alloc_percpu+0xa0/0x100 [ 2523.893072] pcpu_alloc+0x4e2/0x1240 [ 2523.893405] alloc_vfsmnt+0xfd/0x680 [ 2523.893747] clone_mnt+0x6c/0xce0 [ 2523.894058] copy_tree+0x3b0/0xa60 [ 2523.894081] copy_mnt_ns+0x144/0xa00 [ 2523.894099] ? kmem_cache_alloc+0x2a6/0x310 [ 2523.894120] create_new_namespaces+0xd6/0xb20 [ 2523.894142] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2523.894162] ksys_unshare+0x449/0x8a0 [ 2523.894176] ? unshare_fd+0x1c0/0x1c0 [ 2523.894186] ? fput_many+0x2f/0x1a0 [ 2523.894203] ? ksys_write+0x1a9/0x260 [ 2523.894226] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2523.894241] __x64_sys_unshare+0x2d/0x40 [ 2523.894252] do_syscall_64+0x33/0x40 [ 2523.894264] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2523.894273] RIP: 0033:0x7f6b112f9b19 [ 2523.894286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:28:10 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020202) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2523.894294] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2523.894308] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 [ 2523.894315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2523.894323] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2523.894331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2523.894339] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 06:28:10 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) syz_io_uring_setup(0x55da, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x55db, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4, &(0x7f0000000140), 0x1, 0x1}, 0x4) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r2, &(0x7f0000000080)=""/65, 0x41) 06:28:10 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x7de) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:28:10 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020203) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:28:10 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x65c) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:28:10 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:28:10 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capget(&(0x7f0000000140)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x4c14ce44, 0x1000, 0x3, 0x0, 0xab, 0x401}) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) [ 2524.222346] FAULT_INJECTION: forcing a failure. [ 2524.222346] name failslab, interval 1, probability 0, space 0, times 0 [ 2524.223445] CPU: 1 PID: 13487 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2524.224069] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2524.224818] Call Trace: [ 2524.225081] dump_stack+0x107/0x167 [ 2524.225098] should_fail.cold+0x5/0xa [ 2524.225118] ? create_object.isra.0+0x3a/0xa20 [ 2524.225143] should_failslab+0x5/0x20 [ 2524.225164] kmem_cache_alloc+0x5b/0x310 06:28:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2524.225183] ? mark_held_locks+0x9e/0xe0 [ 2524.225201] create_object.isra.0+0x3a/0xa20 [ 2524.225225] kmemleak_alloc_percpu+0xa0/0x100 [ 2524.225244] pcpu_alloc+0x4e2/0x1240 [ 2524.225277] alloc_vfsmnt+0xfd/0x680 [ 2524.225295] clone_mnt+0x6c/0xce0 [ 2524.225317] copy_tree+0x3b0/0xa60 [ 2524.225339] copy_mnt_ns+0x144/0xa00 [ 2524.225356] ? kmem_cache_alloc+0x2a6/0x310 06:28:10 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020204) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2524.225377] create_new_namespaces+0xd6/0xb20 [ 2524.225399] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2524.225419] ksys_unshare+0x449/0x8a0 [ 2524.225433] ? unshare_fd+0x1c0/0x1c0 [ 2524.225445] ? fput_many+0x2f/0x1a0 [ 2524.225465] ? ksys_write+0x1a9/0x260 [ 2524.225485] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2524.225503] __x64_sys_unshare+0x2d/0x40 [ 2524.225515] do_syscall_64+0x33/0x40 [ 2524.225531] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2524.225541] RIP: 0033:0x7f6b112f9b19 [ 2524.225557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2524.225565] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2524.225582] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 [ 2524.225591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2524.225599] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2524.225608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2524.225618] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 06:28:25 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=ANY=[@ANYBLOB="60010000100001000000000000000000ff020000000000000000000000000001fc00000000000000000000000000000000000000000000000000000007000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000e00000010000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002cbd7000000000000a000000000000000000000070001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000002001000040"], 0x160}}, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bef9f20a18f2bd4bf415d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140), 0x10) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64], 0x14}}, 0x4044800) read(r1, &(0x7f0000000080)=""/65, 0x41) 06:28:25 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x7e0) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:28:25 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 95) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:28:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="000000000000000074000000f9ffffffffffffff0000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffff7f000000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:28:25 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x67d) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:28:25 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x7e0) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:28:25 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000380)="0a2d2da2ef9ee479574e35e3ba64f870fe3898f364eddd8079caf5ae0616dffb698891ce445201982337c5a5bfa42703a314a7f82c9295b30351c6a696d1a7e173ab9cc9af1c5006e0044025e8868a8d1a199d7ed9857476d24dd0f9aa64d4fd35d60e125a3fe8970087fa53f87140bc6771deee3d032144161692536e78de9d5e7ea9018b4c8a352844ade27c0b847b013a69fb35e31382d99427d343e6b914ae7bca84796baedf2aa518fd74886f04d6f48ec7fdc5a1dcb9f193b46a2095f9b8c382aad5ae8afebdc22c157d85110db667e0c10dc6eabec0331261c3337731c637") ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r1, &(0x7f0000000080)='attr\x00') capset(&(0x7f0000000040)={0x20071026, r1}, &(0x7f0000000240)={0x7, 0x1ff, 0x3ff, 0x6, 0xfffffffb, 0x9}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1, 0x7b, 0x64, 0x9, 0x0, 0x3ff, 0x4004, 0xc730dfd4dd7969e1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x4, @perf_config_ext={0x3, 0x6}, 0x16902, 0x6, 0x10000, 0x2, 0xff, 0x80000000, 0xa8, 0x0, 0x4, 0x0, 0x10001}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x19) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) capget(&(0x7f0000000100)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000140)={0x2, 0x3, 0x1ff, 0x8, 0x3, 0x9}) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00ed8c28cb4feef0b9f3dcc4864c4c3017ec9db771d5fed9dec67bcbb322c1dee6bc5039c952c21e40bf375d4793b88ab89091a39056a1b14bb139e2cdbab78dd058a434481a9436e023d2f3c8f6c4a78ee4fa631fa511c28a2b653f7d430eeaffde8bcfb9291d822181717c49ca15e51ec5a39a4c9395b7a2b6ce6a6cef4df7de4d62987507d15fb4c1186f59a4d8df65a6c4ff17114677229831f35463d9d0795180f80365b41913f8b75cf2ffe0a2f16f886169612dd82a4e26f18030"], 0x14}}, 0x0) read(r2, &(0x7f0000000080)=""/65, 0x41) 06:28:25 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020205) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2538.967942] FAULT_INJECTION: forcing a failure. [ 2538.967942] name failslab, interval 1, probability 0, space 0, times 0 [ 2538.970580] CPU: 0 PID: 13532 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2538.972095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2538.973913] Call Trace: [ 2538.974503] dump_stack+0x107/0x167 [ 2538.975292] should_fail.cold+0x5/0xa [ 2538.976128] ? alloc_vfsmnt+0x23/0x680 [ 2538.976983] should_failslab+0x5/0x20 [ 2538.977817] kmem_cache_alloc+0x5b/0x310 [ 2538.978712] ? copy_tree+0x61a/0xa60 [ 2538.979523] alloc_vfsmnt+0x23/0x680 [ 2538.980334] clone_mnt+0x6c/0xce0 [ 2538.981094] copy_tree+0x3b0/0xa60 [ 2538.981883] copy_mnt_ns+0x144/0xa00 [ 2538.982701] ? kmem_cache_alloc+0x2a6/0x310 [ 2538.983642] create_new_namespaces+0xd6/0xb20 [ 2538.984620] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2538.985691] ksys_unshare+0x449/0x8a0 [ 2538.986531] ? unshare_fd+0x1c0/0x1c0 [ 2538.987353] ? fput_many+0x2f/0x1a0 [ 2538.988157] ? ksys_write+0x1a9/0x260 [ 2538.988998] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2538.990152] __x64_sys_unshare+0x2d/0x40 [ 2538.991038] do_syscall_64+0x33/0x40 [ 2538.991851] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2538.992967] RIP: 0033:0x7f6b112f9b19 [ 2538.992980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:28:25 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020206) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2538.992987] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2538.993002] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 [ 2538.993010] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2538.993018] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2538.993025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2538.993033] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 06:28:25 executing program 3: timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x2c8, 0x13, 0x100, 0x70bd2d, 0x25dfdbfe, {0x1a}, [@generic="f1b0fed50cb453a3245ab7b65e521d76e3dedf524027eb22dfe9a98c9330c51b688d3cecbe2060d4e3e8c6e9fc8db61452e394abfd943b3f520279ab6ce329205a930641a02afc7fd3b9a9da2969dd5a64a7945993f09ae8f6b3c6debacaf8f0d9b7a90e1702282b2474f220348c46b28f3e082955c254f657016169b7a116763654cca7175a424c9373455800276902d37a782bd5607f0404e90c06530139164403", @nested={0x8, 0x7a, 0x0, 0x1, [@typed={0x4, 0x20}]}, @typed={0x8, 0x33, 0x0, 0x0, @fd=r1}, @nested={0x1ff, 0x5c, 0x0, 0x1, [@generic="cb2e42257afcb1131e913834a7112ee02ab1bef0188761f7aeb2f0c5e243666d9fb4f2491ad1b752bc521cc74177bc00cee408d8c652a32d81ff187d8ea24e4d714daaf0a9640d0b63360606a98b6d7b23aeda1d1fc5d5365e00864c716471", @typed={0x77, 0x32, 0x0, 0x0, @binary="1e962404527a0cf6ca4eae9c929d27c0155584460700aae3f7c4d4dd3b1dd7564ae7988ec736a354c12fbc6b392cf24180b4b501ac62bbb7aed1b7a4ffac787cd26f2da2d7e9cffe089742d1e2f06edccfad0ab6b6104105f10af95bf3e823afd186504b20f54dcff58ff4b3c267c6b71990a1"}, @generic="38a345825869ecee905c40b34e670f551ab2fbf4efb463b3528c6baa66032d2c0a11a85df069db43d38f7e6a05ca0e00107bea9c2b606274acc26451e81ef47fc579073af27b99416d764c8ef080c31db58a225bb02677f3fe56020430b93190ec9797831ad0694a6eeee5ecd5849380953d841fed6ed2abd04ea135d21b85c84f153a48312133b2fbbaf63346cd6f8859f336419ebed85205bbb1a6442b0acbd702023fb6f7df7774a7a2bdeade8a3537ebbfff1b0681e2de175daa2fc4df4180501d401d15b92b7c426b16fe454f63ab65", @generic="aff2273f5257c3327dd53fa9c13e50b6aa17b7f817e8111bb7d65f85fb9444ea9ce98d8b50493bf9acf6dd0d911ddee6dbb9d74e1ce8c190f0653328fbf83bd95acb55a63172b6eaa334b76c75f4478763fa"]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x24008851}, 0x4010) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r2, &(0x7f0000000080)=""/65, 0x41) 06:28:25 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020207) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:28:25 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020208) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:28:25 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ad, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) 06:28:25 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x801) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:28:25 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 96) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:28:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') socket$inet6_udp(0xa, 0x2, 0x0) readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2539.491583] FAULT_INJECTION: forcing a failure. [ 2539.491583] name failslab, interval 1, probability 0, space 0, times 0 [ 2539.491627] CPU: 0 PID: 13582 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2539.491635] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2539.491640] Call Trace: [ 2539.491662] dump_stack+0x107/0x167 [ 2539.491676] should_fail.cold+0x5/0xa [ 2539.491694] ? create_object.isra.0+0x3a/0xa20 [ 2539.491716] should_failslab+0x5/0x20 [ 2539.491736] kmem_cache_alloc+0x5b/0x310 [ 2539.491750] ? find_held_lock+0x2c/0x110 [ 2539.491765] create_object.isra.0+0x3a/0xa20 [ 2539.491780] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2539.491796] kmem_cache_alloc+0x159/0x310 [ 2539.491816] alloc_vfsmnt+0x23/0x680 [ 2539.491831] clone_mnt+0x6c/0xce0 [ 2539.491849] copy_tree+0x3b0/0xa60 [ 2539.491868] copy_mnt_ns+0x144/0xa00 [ 2539.491882] ? kmem_cache_alloc+0x2a6/0x310 [ 2539.491900] create_new_namespaces+0xd6/0xb20 [ 2539.491918] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2539.491935] ksys_unshare+0x449/0x8a0 [ 2539.491946] ? unshare_fd+0x1c0/0x1c0 [ 2539.491957] ? fput_many+0x2f/0x1a0 [ 2539.491973] ? ksys_write+0x1a9/0x260 [ 2539.491991] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2539.492006] __x64_sys_unshare+0x2d/0x40 [ 2539.492018] do_syscall_64+0x33/0x40 [ 2539.492030] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2539.492039] RIP: 0033:0x7f6b112f9b19 [ 2539.492051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2539.492057] RSP: 002b:00007f6b0e84e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2539.492072] RAX: ffffffffffffffda RBX: 00007f6b1140d020 RCX: 00007f6b112f9b19 [ 2539.492079] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2539.492087] RBP: 00007f6b0e84e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2539.492093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2539.492101] R13: 00007ffd6618d60f R14: 00007f6b0e84e300 R15: 0000000000022000 06:28:26 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x20001, &(0x7f0000000740)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl}, {@version_L}], [{@appraise}]}}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0x8d, 0x4e23, 0x1, 0x2, 0xa0, 0x0, 0x89}, {0x3, 0x7fffffff, 0x3, 0x8, 0x0, 0x7fff, 0x4, 0x80000001}, {0x5, 0x9933, 0x2, 0x9}, 0x1, 0x6e6bbd, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x2b}, 0xa, @in6=@loopback, 0x3500, 0x3, 0x1, 0x5a, 0x4, 0x4, 0x4}}, 0xe8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xe3, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) 06:28:26 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x4802020a) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:28:26 executing program 3: timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f0000000480), 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x55da, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_setup(0x4b4e, &(0x7f00000001c0)={0x0, 0xc85a, 0x8, 0x3, 0x13a}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)=0x0) r4 = fcntl$dupfd(r0, 0x406, r1) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x3f, &(0x7f00000004c0)=[0xffffffffffffffff, r5, r5, 0xffffffffffffffff], 0x4}, 0x3) syz_io_uring_submit(r2, r3, &(0x7f0000001700)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f00000016c0)={&(0x7f00000002c0)=@ethernet={0x306, @multicast}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)="366b1ca1f24c6e3b87b50bf7cab0e690c4d82f1da71038137c26eb2ec13e2ae4d2fea5b65195f317429d82", 0x2b}, {&(0x7f0000000380)="e65ce7a8e3d7a38d76f5aa59024f42763e8a330c319b05c84329b24cf9dbffdf76af5ed079268495d01558921ea7f4befa245867a835e54f984ce70783e51335fd2f5e3d35c5a61fc27a6dd078d0377b9052b6b2f0a1a64c0b0b41c51ed85ddb891c2f6a8461", 0x66}, {&(0x7f0000000400)="7e813fff14ce1f89404681a849e58f7e98514e2b1a7d9f649716238501d48c3cb79e70b99ad0f57ae843320dc61083b6480f479169f9b829", 0x38}], 0x3, &(0x7f0000000500)=[{0xd0, 0x114, 0x0, "23680f0df19794714ff186d34c097aa323270a85b05aa85556089461d542140e846130eadbc74a468416f1deacc58d33d1123d6d9b66f575cd422b516425f83c7f8b090c4a1626f46111ba43cf102bd6201bc5b161332108f6ef97f6fec19c6066e4cd206a48da63a3bda3349648f649a251d2c88599c193076cf370532c9c5949507a91bfa4e8804738b2c6b79d77063e6d67a30a5afaff46ae653447f6939ea955045e0cf8f5ca6a5376cd5af8a9854452ac1b56d688e6a77f731b0aa2"}, {0x1010, 0x10b, 0x3ff, "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"}, {0xe0, 0x101, 0x8, "0c9f51be929e7a39950310445993a8dff8fe706344c238bbae2701c58fb2e1c897a3d5d1a3a685af13b42c52d259c2d37a7b7dfa30075d8196bcff8ab6debd6555aac2e020cec7f1269f4d408c26430377fa52b7e84b7e26abdc1a00a2c0bac4f570cd4b0bd7ac6a337ecba4a961206e4768a956d253da27693607c3a9f862eaab5792362a1a9b1c8605395d6058dc4a380d6c5ebbd591232949fb6f3b8d59173d01c47b3cf0421bf5b3efc441894a3730140d56ed89d6bd244d012e29c3c15ae79674b03ca28a45c707cbad7964"}], 0x11c0}, 0x0, 0x2040}, 0x339fe1d2) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d008000ffffffff000000"], 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) 06:28:26 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x801) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:28:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="e64060d9be9bb8b8c31935c711f8fba3ca1ec1", @ANYRES16=0x0, @ANYBLOB="2501000000000000000001000000"], 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x2, 0x6, 0x1000, 0x7f}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x814) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r3, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f00000014c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="00da0000000000007400000000000000010000000000000005acf2832d15415344eba200001000000000e857373838f4d388f7270100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000e60000000000000000000000000000000000007b382c6800000000000000b37c4dcf26f799e7b35156dc446ed793aeed767ff54417db95fc"]) 06:28:26 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x67f) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:28:26 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 97) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2539.883244] FAULT_INJECTION: forcing a failure. [ 2539.883244] name failslab, interval 1, probability 0, space 0, times 0 [ 2539.884501] CPU: 1 PID: 13608 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2539.885237] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2539.886035] Call Trace: [ 2539.886381] dump_stack+0x107/0x167 [ 2539.886741] should_fail.cold+0x5/0xa [ 2539.887184] should_failslab+0x5/0x20 [ 2539.887564] __kmalloc_track_caller+0x79/0x370 [ 2539.888012] ? kstrdup_const+0x53/0x80 [ 2539.888450] kstrdup+0x36/0x70 [ 2539.888770] kstrdup_const+0x53/0x80 [ 2539.889201] alloc_vfsmnt+0xb5/0x680 [ 2539.889569] clone_mnt+0x6c/0xce0 [ 2539.890411] copy_tree+0x3b0/0xa60 [ 2539.890782] copy_mnt_ns+0x144/0xa00 [ 2539.891681] ? kmem_cache_alloc+0x2a6/0x310 [ 2539.892707] create_new_namespaces+0xd6/0xb20 [ 2539.893504] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2539.894691] ksys_unshare+0x449/0x8a0 [ 2539.895082] ? unshare_fd+0x1c0/0x1c0 [ 2539.895903] ? fput_many+0x2f/0x1a0 [ 2539.896515] ? ksys_write+0x1a9/0x260 [ 2539.896922] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2539.897738] __x64_sys_unshare+0x2d/0x40 [ 2539.898353] do_syscall_64+0x33/0x40 [ 2539.899029] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2539.900014] RIP: 0033:0x7f6b112f9b19 [ 2539.900743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2539.904888] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2539.905778] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 [ 2539.906481] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2539.907168] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2539.907178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2539.907187] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 06:28:40 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) getsockname(r0, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000140)=0x80) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 06:28:40 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x803) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:28:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120000012cce477000fbdbdf25fe8000000000002025000004d20a002b00"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:28:40 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x803) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:28:40 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x6a0) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:28:40 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 98) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:28:40 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x1, &(0x7f0000000180)={0x0, 0x4, 0x1, @thr={&(0x7f00000002c0)="2e4d27b1ed26baf68c5463d578e9818286fdda38f2f0b90cabac447cd648c600508f4ae35e0e506ee40393bef0f1315e390a95729c09564e2010a43de6e8ebadb5ab87fafbd1b66ca5f01d4975d7961bbee7e8e5ceddb5e27ecd9e2019", &(0x7f0000000340)="9b167464441610cb6c54362e3a52b1b0d9636f9fe03c8ca14560f1978efbe9791e641928fb74b133106c05a246b5ff52302bc7feb1dfbb88fa9cedf24dee2deba26f17441e66b713e91a6b225e56d768866ef65f21c10840f596736b9bb997757f378c9d745452a45a9c49178e42d28be55b3805a7c2f84051c4df7d0687d9a3cddc2ef607733616f2468b4ffbf38290d9852473dcdf43c0eecc9cb140d5594b64b7fbe624fed3dccbf3482f1f129b0edda299b2b0db547d10e918cfecdad6a282d7"}}, &(0x7f0000000240)=0x0) timer_gettime(r0, &(0x7f0000000440)) timer_gettime(r0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, &(0x7f0000000200)) r1 = socket$netlink(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000140)={{r2, r3+10000000}, {0x77359400}}, &(0x7f00000001c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) 06:28:40 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x4802020c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2553.826436] FAULT_INJECTION: forcing a failure. [ 2553.826436] name failslab, interval 1, probability 0, space 0, times 0 [ 2553.827695] CPU: 0 PID: 13643 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2553.828360] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2553.829056] Call Trace: [ 2553.829336] dump_stack+0x107/0x167 [ 2553.829647] should_fail.cold+0x5/0xa [ 2553.829976] ? create_object.isra.0+0x3a/0xa20 [ 2553.830452] should_failslab+0x5/0x20 [ 2553.830781] kmem_cache_alloc+0x5b/0x310 [ 2553.831288] create_object.isra.0+0x3a/0xa20 [ 2553.831664] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2553.832164] __kmalloc_track_caller+0x177/0x370 [ 2553.832575] ? kstrdup_const+0x53/0x80 [ 2553.832909] kstrdup+0x36/0x70 [ 2553.833235] kstrdup_const+0x53/0x80 [ 2553.833555] alloc_vfsmnt+0xb5/0x680 [ 2553.833877] clone_mnt+0x6c/0xce0 [ 2553.834260] copy_tree+0x3b0/0xa60 [ 2553.834572] copy_mnt_ns+0x144/0xa00 [ 2553.834896] ? kmem_cache_alloc+0x2a6/0x310 [ 2553.835315] create_new_namespaces+0xd6/0xb20 [ 2553.835699] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2553.836193] ksys_unshare+0x449/0x8a0 [ 2553.836521] ? unshare_fd+0x1c0/0x1c0 [ 2553.836847] ? fput_many+0x2f/0x1a0 [ 2553.837326] ? ksys_write+0x1a9/0x260 [ 2553.837661] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2553.838184] __x64_sys_unshare+0x2d/0x40 [ 2553.838527] do_syscall_64+0x33/0x40 [ 2553.838846] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2553.839325] RIP: 0033:0x7f6b112f9b19 [ 2553.839641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2553.842212] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2553.842848] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 [ 2553.843565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2553.844228] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2553.844821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2553.845459] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 06:28:40 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x67f) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:01 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x824) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:01 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000011600010d0000000071c5d68e6366917dd7000000000023"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) [ 2574.542409] FAULT_INJECTION: forcing a failure. [ 2574.542409] name failslab, interval 1, probability 0, space 0, times 0 [ 2574.543458] CPU: 1 PID: 13675 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2574.544048] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2574.544755] Call Trace: [ 2574.544992] dump_stack+0x107/0x167 [ 2574.545312] should_fail.cold+0x5/0xa [ 2574.545645] ? create_object.isra.0+0x3a/0xa20 [ 2574.546044] should_failslab+0x5/0x20 [ 2574.546392] kmem_cache_alloc+0x5b/0x310 [ 2574.546744] create_object.isra.0+0x3a/0xa20 [ 2574.547128] kmemleak_alloc_percpu+0xa0/0x100 [ 2574.547519] pcpu_alloc+0x4e2/0x1240 [ 2574.547856] alloc_vfsmnt+0xfd/0x680 [ 2574.548180] clone_mnt+0x6c/0xce0 [ 2574.548489] copy_tree+0x3b0/0xa60 [ 2574.548804] copy_mnt_ns+0x144/0xa00 [ 2574.549126] ? kmem_cache_alloc+0x2a6/0x310 [ 2574.549507] create_new_namespaces+0xd6/0xb20 [ 2574.549895] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2574.550336] ksys_unshare+0x449/0x8a0 [ 2574.550661] ? unshare_fd+0x1c0/0x1c0 [ 2574.550982] ? fput_many+0x2f/0x1a0 [ 2574.551293] ? ksys_write+0x1a9/0x260 [ 2574.551629] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2574.552072] __x64_sys_unshare+0x2d/0x40 [ 2574.552414] do_syscall_64+0x33/0x40 [ 2574.552734] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2574.553161] RIP: 0033:0x7f6b112f9b19 [ 2574.553476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2574.555034] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2574.555677] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 [ 2574.556278] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2574.556873] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2574.557471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2574.558074] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 06:29:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x824) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:29:01 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capget(&(0x7f0000000140)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x4c14ce44, 0x1000, 0x3, 0x0, 0xab, 0x401}) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) 06:29:01 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x4802020e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:01 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 99) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:01 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x6a3) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000340)=""/225, 0xe1}, {&(0x7f0000000440)=""/78, 0x4e}, {&(0x7f00000014c0)=""/65, 0x41}, {&(0x7f0000001540)=""/93, 0x5d}], 0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:01 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x636) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:01 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020210) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:01 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020211) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:01 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) (fail_nth: 100) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:01 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)=0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000010020000000504000000000000fbffffff040000000000020003000000000000009cbb0000000000000400000000000000200000000000000000000000000000000c0000000500000000000000007b382c6800000000000000"]) [ 2574.841723] FAULT_INJECTION: forcing a failure. [ 2574.841723] name failslab, interval 1, probability 0, space 0, times 0 [ 2574.842811] CPU: 1 PID: 13708 Comm: syz-executor.2 Not tainted 5.10.224 #1 [ 2574.843401] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2574.844109] Call Trace: [ 2574.844345] dump_stack+0x107/0x167 [ 2574.844660] should_fail.cold+0x5/0xa [ 2574.844997] ? create_object.isra.0+0x3a/0xa20 [ 2574.845395] should_failslab+0x5/0x20 [ 2574.845728] kmem_cache_alloc+0x5b/0x310 [ 2574.846084] ? mark_held_locks+0x9e/0xe0 [ 2574.846441] create_object.isra.0+0x3a/0xa20 [ 2574.846825] kmemleak_alloc_percpu+0xa0/0x100 [ 2574.847218] pcpu_alloc+0x4e2/0x1240 [ 2574.847552] alloc_vfsmnt+0xfd/0x680 [ 2574.847877] clone_mnt+0x6c/0xce0 [ 2574.848186] copy_tree+0x3b0/0xa60 [ 2574.848498] copy_mnt_ns+0x144/0xa00 [ 2574.848820] ? kmem_cache_alloc+0x2a6/0x310 [ 2574.849200] create_new_namespaces+0xd6/0xb20 [ 2574.849589] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 2574.850011] ksys_unshare+0x449/0x8a0 [ 2574.850359] ? unshare_fd+0x1c0/0x1c0 [ 2574.850682] ? fput_many+0x2f/0x1a0 [ 2574.850996] ? ksys_write+0x1a9/0x260 [ 2574.851332] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2574.851777] __x64_sys_unshare+0x2d/0x40 [ 2574.852118] do_syscall_64+0x33/0x40 [ 2574.852443] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2574.852872] RIP: 0033:0x7f6b112f9b19 [ 2574.853189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2574.854739] RSP: 002b:00007f6b0e86f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2574.855384] RAX: ffffffffffffffda RBX: 00007f6b1140cf60 RCX: 00007f6b112f9b19 [ 2574.855988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048020200 [ 2574.856589] RBP: 00007f6b0e86f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2574.857187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2574.857790] R13: 00007ffd6618d60f R14: 00007f6b0e86f300 R15: 0000000000022000 06:29:01 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020212) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:01 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x6c4) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x826) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:29:01 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x826) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:15 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020214) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write$P9_RSTATFS(r2, &(0x7f0000000340)={0x43, 0x9, 0x1, {0xea2, 0x9, 0x5, 0x200, 0x80b, 0x6, 0x3, 0x401, 0x1}}, 0x43) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:15 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000380)="0a2d2da2ef9ee479574e35e3ba64f870fe3898f364eddd8079caf5ae0616dffb698891ce445201982337c5a5bfa42703a314a7f82c9295b30351c6a696d1a7e173ab9cc9af1c5006e0044025e8868a8d1a199d7ed9857476d24dd0f9aa64d4fd35d60e125a3fe8970087fa53f87140bc6771deee3d032144161692536e78de9d5e7ea9018b4c8a352844ade27c0b847b013a69fb35e31382d99427d343e6b914ae7bca84796baedf2aa518fd74886f04d6f48ec7fdc5a1dcb9f193b46a2095f9b8c382aad5ae8afebdc22c157d85110db667e0c10dc6eabec0331261c3337731c637") ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r1, &(0x7f0000000080)='attr\x00') capset(&(0x7f0000000100)={0x20080522, r1}, &(0x7f0000000140)={0x9bb, 0xfffffffa, 0x1000, 0x2, 0xfffffff7, 0xc47c}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r2, &(0x7f0000000080)=""/65, 0x41) 06:29:15 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x6c7) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:15 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:15 executing program 6: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x2ff, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x81) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) 06:29:15 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x847) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:15 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x847) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:29:15 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) 06:29:15 executing program 6: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) io_setup(0x5, &(0x7f0000000700)=0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000240)=0x40, 0x4) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0001bfbd17d6e600004c98000c00990000000800c400050000839778e5b218a6cc3f1ee0f87100"], 0x28}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) 06:29:15 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020215) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:15 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020214) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:15 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x4802022e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:15 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000340)=""/211, 0xd3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2d, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:15 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000380)="0a2d2da2ef9ee479574e35e3ba64f870fe3898f364eddd8079caf5ae0616dffb698891ce445201982337c5a5bfa42703a314a7f82c9295b30351c6a696d1a7e173ab9cc9af1c5006e0044025e8868a8d1a199d7ed9857476d24dd0f9aa64d4fd35d60e125a3fe8970087fa53f87140bc6771deee3d032144161692536e78de9d5e7ea9018b4c8a352844ade27c0b847b013a69fb35e31382d99427d343e6b914ae7bca84796baedf2aa518fd74886f04d6f48ec7fdc5a1dcb9f193b46a2095f9b8c382aad5ae8afebdc22c157d85110db667e0c10dc6eabec0331261c3337731c637") ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r1, &(0x7f0000000080)='attr\x00') capset(&(0x7f0000000240)={0xc92bfb053a14a5a, r1}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) timer_create(0x5, &(0x7f00000001c0)={0x0, 0x17, 0x4, @thr={&(0x7f00000004c0)="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", &(0x7f0000000100)="59b8711397567588b7c9d9227705bb49d494396ff0795bf4e0f72025627fd336f29cd95981341bcaa63c6cf741d358955237a5e93ba6c156dbe4fd3ade492a68f87876"}}, &(0x7f0000000200)) read(r2, &(0x7f0000000080)=""/65, 0x41) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)=0x1) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) 06:29:15 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x849) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:29:15 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020004) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x6, 0x0, 0x800}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) io_setup(0x5, &(0x7f0000000700)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') io_submit(r5, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000340)={{0x2c, @local, 0x4e22, 0x1, 'lc\x00', 0x19, 0x56, 0x1a}, {@multicast1, 0x4e23, 0x10000, 0x80, 0x10001, 0x5}}, 0x44) dup2(r3, r4) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f00000003c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000000000000100000000000000050000000000000001acfb0ae6d609486e5fb23138b5ab3dda00008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb0000000000000400000020000000000000000000000000000000000000000000000035f85f027c05fc311340b2d1d1975754924afa192af07a58683d96fd8732abfb0f7e7cb789af7ad4c939782332f905a1b4a65c3205c7ca3d1607b6dfc104fdc000"/206]) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f00000014c0)) 06:29:31 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="04", 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x0, 0xfffffffc, 0x7ff, 0xed4, 0x6, "ce91d20e528a547126f043b11e6349a28ed581", 0x40, 0x5}) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) ioctl$KDSETLED(r0, 0x4b32, 0xf655) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x86a) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:29:31 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020232) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:31 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020202) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:31 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x849) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:31 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000004c0)={0x10b1200, &(0x7f0000000140), &(0x7f00000001c0)=0x0, &(0x7f0000000200), {0x1e}, &(0x7f0000000240)=""/44, 0x2c, &(0x7f00000002c0)=""/255, &(0x7f00000003c0)=[0x0], 0x1}, 0x58) capset(&(0x7f0000000400)={0x20071026, r0}, &(0x7f0000000540)={0x4, 0xa1, 0x4, 0x80, 0x4}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) 06:29:31 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x6e8) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, &(0x7f0000000380)="0a2d2da2ef9ee479574e35e3ba64f870fe3898f364eddd8079caf5ae0616dffb698891ce445201982337c5a5bfa42703a314a7f82c9295b30351c6a696d1a7e173ab9cc9af1c5006e0044025e8868a8d1a199d7ed9857476d24dd0f9aa64d4fd35d60e125a3fe8970087fa53f87140bc6771deee3d032144161692536e78de9d5e7ea9018b4c8a352844ade27c0b847b013a69fb35e31382d99427d343e6b914ae7bca84796baedf2aa518fd74886f04d6f48ec7fdc5a1dcb9f193b46a2095f9b8c382aad5ae8afebdc22c157d85110db667e0c10dc6eabec0331261c3337731c637") ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r2, &(0x7f0000000080)='attr\x00') syz_open_procfs(r2, &(0x7f0000000000)='net/igmp\x00') r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000120000012cbd7000fbdbdf25fe8023001504d20a002b0005001900ff000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:31 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020238) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:31 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020203) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x86c) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:29:31 executing program 3: timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x1) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000480)={{r3, r4+60000000}, {0x0, 0x989680}}, 0x0) timer_gettime(r2, &(0x7f00000001c0)) read(r1, &(0x7f0000000080)=""/65, 0x41) 06:29:46 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x88d) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:29:46 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000380)="0a2d2da2ef9ee479574e35e3ba64f870fe3898f364eddd8079caf5ae0616dffb698891ce445201982337c5a5bfa42703a314a7f82c9295b30351c6a696d1a7e173ab9cc9af1c5006e0044025e8868a8d1a199d7ed9857476d24dd0f9aa64d4fd35d60e125a3fe8970087fa53f87140bc6771deee3d032144161692536e78de9d5e7ea9018b4c8a352844ade27c0b847b013a69fb35e31382d99427d343e6b914ae7bca84796baedf2aa518fd74886f04d6f48ec7fdc5a1dcb9f193b46a2095f9b8c382aad5ae8afebdc22c157d85110db667e0c10dc6eabec0331261c3337731c637") ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r1, &(0x7f0000000080)='attr\x00') capget(&(0x7f0000000100)={0x20080522, r1}, &(0x7f0000000140)={0x5, 0x6, 0x1ff, 0x6, 0x7fffffff, 0x8000}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r2, &(0x7f0000000080)=""/65, 0x41) 06:29:46 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x86a) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:46 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x6ea) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:46 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020204) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:46 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x4802023a) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:46 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x6e8) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000014c0)={0x8, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0xec1, 0x7fff}) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000002500)=""/4093, 0xffd}, {&(0x7f0000000400)=""/108, 0x80}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f00000005c0)=""/60, 0x3d}], 0x4) dup2(r3, r4) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000120000012cbd7000fbdbdf25fe840000000000000000000000000025000004d20a006b0005001900ff000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)=0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f00000000c0)=0x1c, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010023d1c9c4964f5d7a00000000000005000000000000000100008000000000ffff000000000000020000000500000000fbffffff040000000000000003000000000000000000000000000020000000000000000000000000000000000000000000000000000000007b382c000000000000000000", @ANYRESHEX, @ANYRESHEX=r5]) 06:29:46 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020205) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:46 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020246) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:46 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0xd5bdf90692f49776, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x6c, 0x3e, 0x3f, 0x7f, 0x0, 0x0, 0x2c910, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000100), 0x5}, 0x48a09, 0x8, 0x9, 0x3, 0x3, 0x4, 0x0, 0x0, 0x7, 0x0, 0x20}, 0xffffffffffffffff, 0xd, r0, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) 06:29:46 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) dup2(r0, 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x9f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9400010000000000ffbcec1bf8d83c5984c9fec934453b508d00ffffffff00"], 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) 06:29:46 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020206) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:46 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001601010a890d000003dea5a7d74779f2cfd4000300ffffffff00"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) timer_gettime(0x0, &(0x7f0000000040)) 06:29:46 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020248) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:46 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x88f) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 2620.125122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=278 sclass=netlink_route_socket pid=13914 comm=syz-executor.3 [ 2620.150838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=278 sclass=netlink_route_socket pid=13914 comm=syz-executor.3 06:29:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000)=0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)=0x1) poll(&(0x7f0000000340)=[{r1, 0x400}, {0xffffffffffffffff, 0x100}, {r1, 0x80}, {0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x40}, {r1, 0x201}, {r4, 0x9044}, {r2, 0xa0}, {r5, 0x8400}], 0x9, 0x52) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r7, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r6, r7) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x8, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x33}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:46 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020207) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:29:46 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x86c) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:00 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x4802024a) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:00 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) dup2(r0, 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x9f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9400010000000000ffbcec1bf8d83c5984c9fec934453b508d00ffffffff00"], 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) 06:30:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl(r0, 0x12a66885, &(0x7f00000015c0)="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") ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x290d, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000380)="109b56b17274b95f216c3566e8c5ed75b335ce0fa5cd755b844f7103e5c7304bb42663ddae3ff140db60fb20a57e68d298ab4d3cb333cb60c7b90d712d8bb40068b21f0fdcbbc40eb84673989ee6d2", 0x4f}, {&(0x7f00000014c0)="97cc0c49406b356e177775338baea36648a510dcb968c01ded30b4c18c885d7c9e5e06305a7193b79cf172cdc4fc14213b7b3ffdfff5f417ed906d70aad1332f73c19bff12dc01184f3910a5ee981822871ed18ad18373b0dfa927e0295931e9c81c1bbefa9746844289d709f218fcb609f65c597bb305d9f0151c7eba5fd78be62c32c88e7df47751d0f9e78a01661856cd93a2a69d66b26a7997ad73c101e303647c5a2283fd997fd7f8d436ac204867f63add9b27260795b2f45d469cb2f691c3eac31656a67573902a39ff00f8ce8b6628276b7feed50aa798b6e49b8cbc6dd69ee45ffeeee9e8cf3986c2c7c9a16b", 0xf1, 0x7}], 0x20020, &(0x7f0000000400)={[{@size={'size', 0x3d, [0x38, 0x36]}}, {@mpol={'mpol', 0x3d, {'local', '=relative', @val={0x3a, [0x35, 0x35, 0x38, 0x38, 0x2f, 0x33]}}}}, {@huge_within_size}, {@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@huge_never}, {@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x2d, 0x36, 0x35]}}}}], [{@euid_eq}]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES16]) 06:30:00 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0xd5bdf90692f49776, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x6c, 0x3e, 0x3f, 0x7f, 0x0, 0x0, 0x2c910, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000100), 0x5}, 0x48a09, 0x8, 0x9, 0x3, 0x3, 0x4, 0x0, 0x0, 0x7, 0x0, 0x20}, 0xffffffffffffffff, 0xd, r0, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) 06:30:00 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x70b) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:00 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020208) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:00 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x88d) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:00 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x8b0) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:30:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x420}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x4810ada4}}]}}) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x24, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r5, r6) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x13, r7, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x1, 0x0, 0x6, 0x5, 0x0, 0x2, 0x422, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x7, 0x1}, 0x8005, 0x2, 0x0, 0x2, 0x4889, 0x3, 0x7b, 0x0, 0xffff8000, 0x0, 0xfffffffffffffff7}, 0x0, 0xf, r7, 0x1) 06:30:00 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x4802024c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:00 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x4802020a) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:00 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020262) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:00 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x4802020c) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:14 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020268) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:14 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x70d) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:14 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020210) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:14 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x6a0) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:14 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x88f) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)=0x1) readv(r2, &(0x7f0000001880)=[{&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000340)=""/152, 0x98}, {&(0x7f00000014c0)=""/203, 0xcb}, {&(0x7f0000000400)=""/131, 0x83}, {&(0x7f00000015c0)=""/43, 0x2b}, {&(0x7f0000001600)=""/220, 0xdc}, {&(0x7f0000001700)=""/134, 0x86}, {&(0x7f00000017c0)=""/113, 0x71}, {&(0x7f0000001840)=""/8, 0x8}], 0x9) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000240), 0x4, 0x80000) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f00000019c0)) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001a00)}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r5, r6) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="30000000120000012cbd7000fbdbdf25fe800000000000000000000000000025000004d20a002b0005001900ff0000006fb4976166e71cf809ed6787747437ff0a70234bc842960e735e7b3d4e7d08defa9d7b4e062f95"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000001a40)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]) 06:30:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x8b2) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:30:14 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) dup2(r0, 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x9f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9400010000000000ffbcec1bf8d83c5984c9fec934453b508d00ffffffff00"], 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) 06:30:14 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x6a0) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:30:14 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x4802026c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:14 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020211) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:14 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020274) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:14 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020212) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x8d3) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:30:15 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x8b0) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:15 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x4802027a) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:15 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) name_to_handle_at(r1, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x8, 0x9, 0x99, 0x8}}, &(0x7f0000000300), 0x1000) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r2, &(0x7f0000000080)=""/65, 0x41) 06:30:29 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x8b2) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="30008c08120000012cbd7000fbdbdfa7c605a655fb70cbd5bf9adda925fe800000000000000000000000000025000004"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:29 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020214) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:29 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) dup2(r0, 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x9f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9400010000000000ffbcec1bf8d83c5984c9fec934453b508d00ffffffff00"], 0x14}}, 0x0) 06:30:29 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x72e) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:29 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020294) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:29 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001600010d070000d00300ffff7d2800ff87d6b59b5760bcff533582c091dc526f74ef373d50c93d3309db9ce71167b9af1411843ba43802c5b01bee102636dc363dbbd9227e965259d5220a"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) 06:30:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x8d5) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:30:30 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x615) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:30:30 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) dup2(r0, 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x9f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 06:30:30 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020296) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:30 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020215) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:30 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) dup2(r0, 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x9f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 06:30:30 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x480202a8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:30 executing program 3: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = getpgid(0x0) r2 = gettid() clone3(&(0x7f00000004c0)={0x198000200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0), {0x21}, &(0x7f00000002c0)=""/156, 0x9c, &(0x7f0000000380)=""/145, &(0x7f0000000200)=[r1, r2], 0x2}, 0x58) 06:30:30 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x4802022e) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:43 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x480202f0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x20001, &(0x7f0000000740)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@posixacl}, {@version_L}], [{@appraise}]}}) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffdfffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r4, r5) unshare(0xca000600) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:43 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x8d3) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:43 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) dup2(r0, 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x9f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) 06:30:43 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x730) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:43 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x5f0) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:43 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020234) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:43 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x8f6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:30:43 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x480202f8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:43 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020238) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:43 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) dup2(r0, 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x9f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) 06:30:43 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) dup2(r0, 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x9f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) timer_gettime(0x0, &(0x7f0000000440)) 06:30:43 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x4802023a) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:43 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x480202fc) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:43 executing program 3: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) close_range(0xffffffffffffffff, r0, 0x2) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f00000002c0), &(0x7f0000000340)="b0640a37e6ad070c9dc716657c6c6b275e01170bb358fbaa2bd8adfc35276a047bac5216bee3a00b057e2f797c15d97c55da28ece03c9b1d10435ee429625f94d1efbbc59fee5ee3b69c26c5beb36dc7d1b7be4dd9693876f05c0501e135d1b724f8b271bda7a2c42fa48486bf8998144d53f6345750b9299bc66766f4c4c7d4b1a53ca10eb3bb756bd8f288cf8688d2c61073dba04bfac66988c4f8b3c3cf3fbc0907739e59686110280fd2d24bfeac801b92b56504871385c2c39e1e69d1f03cd8ef9d510444f716bcd7948c3b9790c69192ea434216a3"}}, &(0x7f0000000240)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) 06:30:43 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) dup2(r0, 0xffffffffffffffff) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x9f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 06:30:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) r2 = gettid() r3 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) kcmp(r2, r3, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) poll(&(0x7f0000000080)=[{r1, 0x122}], 0x1, 0x8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000}, 0x8300, 0x20, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x40000000}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r6, &(0x7f0000000200)=[{&(0x7f00000014c0)=""/4089, 0xff9}, {&(0x7f0000000140)=""/34, 0x22}], 0x2) dup2(r5, r4) 06:30:57 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x751) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:57 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020300) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:57 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x8d5) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:57 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x8f8) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:30:57 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x4802023e) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:57 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) dup2(r0, 0xffffffffffffffff) timer_delete(0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 06:30:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)=0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000000)=0x1) copy_file_range(r5, &(0x7f0000000000), r6, &(0x7f0000000340)=0x1000, 0x6, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:57 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) dup2(r0, 0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x3) 06:30:57 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020304) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:57 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020248) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:57 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) ioctl$TCXONC(r0, 0x540a, 0x3) 06:30:57 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x4802024a) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:57 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020403) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:30:57 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 06:30:57 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x4802024c) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:10 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020500) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:10 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x900) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:31:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1414) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r2, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$TIOCCBRK(r4, 0x5428) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000240)) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') readv(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r5, r6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000014c0)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r0, @ANYRESDEC, @ANYRES16=r6, @ANYRESOCT, @ANYRESOCT], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:31:10 executing program 6: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) 06:31:10 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x8d3) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:10 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x753) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:10 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x4802024f) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:10 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x8f6) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:10 executing program 6: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) 06:31:10 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x4802025a) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:11 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020600) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:11 executing program 6: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) 06:31:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) r2 = gettid() r3 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) kcmp(r2, r3, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) poll(&(0x7f0000000080)=[{r1, 0x122}], 0x1, 0x8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000}, 0x8300, 0x20, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x40000000}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r6, &(0x7f0000000200)=[{&(0x7f00000014c0)=""/4089, 0xff9}, {&(0x7f0000000140)=""/34, 0x22}], 0x2) dup2(r5, r4) 06:31:11 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020260) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:11 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 06:31:11 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x774) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:11 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x8f8) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:24 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020262) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:24 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x919) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:24 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x919) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:31:24 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 06:31:24 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x777) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x4, 0x1, 0x9, 0x1, 0x1, "5c496a1e8d7325fc7c6f14d8626497ed4bc855", 0x0, 0x2}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)=0x1) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000340)) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x4, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="301f9800120000012cbd7000fbdbdf25fe800000000000000000800000000025000004d20a002b1405001900ff000000d69ab3e79baf9c1519ed908d17dea71858f952faa9ae9456b6c9da209a9aa1d73d8da6388fc069ddcc9732cca1c140c63bc2a271fcccc7a9fa29547d9b375cdcb302e1eee1951716d1e82ce9abd8676512449004817557449c10dabba3bb00"/152], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:24 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020700) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:24 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 06:31:24 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020268) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:24 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020900) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x4, 0x1, 0x9, 0x1, 0x1, "5c496a1e8d7325fc7c6f14d8626497ed4bc855", 0x0, 0x2}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)=0x1) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000340)) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:25 executing program 6: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) 06:31:25 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x91b) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:25 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020a00) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:25 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x4802026c) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:25 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x4802026e) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:25 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x91b) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:31:25 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x798) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:40 executing program 6: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) 06:31:40 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x79a) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:40 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x93c) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:40 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020274) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:40 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020c00) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x4, 0x1, 0x9, 0x1, 0x1, "5c496a1e8d7325fc7c6f14d8626497ed4bc855", 0x0, 0x2}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)=0x1) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000340)) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYBLOB="0000639f000000007400000000000000010000000000000005000000000000000100008000000000ffff00000000000003000000050000000900000031f2ff0d40ccfaa1c0a125ced80ac0e4fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:40 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x93c) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:31:40 executing program 6: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) 06:31:40 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020d00) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:40 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x4802027a) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:40 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 06:31:54 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020e00) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:54 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x480202f4) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:54 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x93e) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:54 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x93e) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:31:54 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 06:31:54 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x7bb) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) poll(&(0x7f0000000140), 0x0, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x125}, 0x14}}, 0x0) getsockopt$sock_buf(r2, 0x1, 0x37, &(0x7f0000000340)=""/143, &(0x7f0000000000)=0x8f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) unshare(0x2000000) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x4, 0x1, 0x9, 0x1, 0x1, "5c496a1e8d7325fc7c6f14d8626497ed4bc855", 0x0, 0x2}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)=0x1) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000340)) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:31:54 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x480202f8) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:54 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x480202fc) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:54 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48020f00) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:54 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 06:31:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x4, 0x1, 0x9, 0x1, 0x1, "5c496a1e8d7325fc7c6f14d8626497ed4bc855", 0x0, 0x2}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)=0x1) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000340)) 06:31:54 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020300) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:54 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x95f) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:31:54 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48021100) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:08 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x961) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:08 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020304) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:08 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48021200) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:08 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x777) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:08 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x95f) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:32:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x4, 0x1, 0x9, 0x1, 0x1, "5c496a1e8d7325fc7c6f14d8626497ed4bc855", 0x0, 0x2}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000340)) 06:32:08 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x7bd) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:08 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) r5 = syz_io_uring_complete(0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x28, 0x12, 0x300, 0x70bd2c, 0x25dfdbfb, {@in=@multicast2, 0x4d2, 0xa, 0x2b}}, 0x3}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:08 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020308) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:08 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48021400) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x4, 0x1, 0x9, 0x1, 0x1, "5c496a1e8d7325fc7c6f14d8626497ed4bc855", 0x0, 0x2}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000340)) 06:32:08 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48021c00) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:08 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020403) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:08 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x4fd) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:32:08 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48022000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:08 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)=0x1) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x334) poll(&(0x7f0000000140)=[{r0, 0x80}, {r2, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f00000000c0)=0xd53f) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb0000000000000400000000000000200000000000000000000065858d25e94553c8998e0000000000000000000000000000bc0000007b382c6800000000000000"]) fstatfs(0xffffffffffffffff, &(0x7f00000014c0)=""/237) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000015c0)={{0x0, 0x7f, 0x1, 0xffffffff, 0x1, 0x7, 0x4, 0x8, 0x5, 0x8, 0x2, 0x5, 0xa, 0x2, 0x4}}) 06:32:08 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x982) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:08 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020500) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:08 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x7de) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x4, 0x1, 0x9, 0x1, 0x1, "5c496a1e8d7325fc7c6f14d8626497ed4bc855", 0x0, 0x2}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000340)) 06:32:08 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48022c00) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:08 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x961) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:32:08 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020020000500000009000000cbffffff040000000000000003000000000000009cbb000000000000000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:08 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020600) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:08 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48022e00) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:22 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x961) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:32:22 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x7e0) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x4, 0x1, 0x9, 0x1, 0x1, "5c496a1e8d7325fc7c6f14d8626497ed4bc855", 0x0, 0x2}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000340)) 06:32:22 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x984) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') openat(r2, &(0x7f0000000340)='./file0\x00', 0x80000, 0x23) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:22 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020700) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:22 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x982) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:32:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48023200) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:22 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x961) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:22 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020803) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48023605) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x4, 0x1, 0x9, 0x1, 0x1, "5c496a1e8d7325fc7c6f14d8626497ed4bc855", 0x0, 0x2}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCGETS2(r4, 0x802c542a, &(0x7f0000000340)) 06:32:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48023800) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:22 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020900) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:22 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x801) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48023900) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:36 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x9a5) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:36 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x803) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48023f00) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:36 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x4fd) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:32:36 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x984) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:32:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000340), 0x2, 0x3) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:36 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020a00) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x4, 0x1, 0x9, 0x1, 0x1, "5c496a1e8d7325fc7c6f14d8626497ed4bc855", 0x0, 0x2}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000340)) 06:32:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x4, 0x1, 0x9, 0x1, 0x1, "5c496a1e8d7325fc7c6f14d8626497ed4bc855", 0x0, 0x2}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000340)) 06:32:36 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020c00) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48024000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:49 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x9a7) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]) 06:32:49 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020d00) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:49 executing program 6: timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d000000c29a92fc42c350"], 0x14}}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) capset(&(0x7f0000000140)={0x19980330, r2}, &(0x7f00000001c0)={0x6, 0xffff, 0x4, 0x100, 0x4}) read(r1, &(0x7f0000000080)=""/65, 0x41) 06:32:49 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48024a00) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:49 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x824) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x4, 0x1, 0x9, 0x1, 0x1, "5c496a1e8d7325fc7c6f14d8626497ed4bc855", 0x0, 0x2}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000340)) 06:32:49 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x9a5) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:32:49 executing program 6: timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d000000c29a92fc42c350"], 0x14}}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) capset(&(0x7f0000000140)={0x19980330, r2}, &(0x7f00000001c0)={0x6, 0xffff, 0x4, 0x100, 0x4}) read(r1, &(0x7f0000000080)=""/65, 0x41) 06:32:49 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48026100) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:49 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020e00) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:32:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x4d8) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:33:03 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x9a7) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:33:03 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48026300) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:33:03 executing program 6: timer_delete(0x0) timer_create(0x1, &(0x7f0000000140)={0x0, 0x6, 0x1, @thr={&(0x7f0000000100)="ce4c6dcb6efd9c9ed8babd87c3829129a679e3c5d15bc619b383631a", &(0x7f00000001c0)="ccd318823195813698449f8fb6722278560096695879c3645488174dd5ac69685083fe8d01f7a038ed0ad697c8c2b390146309d2241f8dc055584d9e01be2493e16088e4db00ca13998773d29b0accdeca62966a784e4e72478e9d7ecc4232eaa490810b0cd09f58412f5c6e0b82c36afb42ef5f19d99f7f9cc28a7a3fc3905b52b9adc521d48e2e20065a4317e9e63dc14fd3b0955a51b9392d5ca977f54d76db0bea"}}, &(0x7f00000002c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000440)) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d0000000300ffffffff00"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) 06:33:03 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020f00) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:33:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x4, 0x1, 0x9, 0x1, 0x1, "5c496a1e8d7325fc7c6f14d8626497ed4bc855", 0x0, 0x2}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000340)) 06:33:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000340)={{0xa, 0x4e23, 0x1, @mcast1, 0x6}, {0xa, 0x4e20, 0x80000001, @remote, 0x1000}, 0x3ff, [0xfff, 0x6, 0x1, 0x5, 0x42, 0x8, 0x62000000]}, 0x5c) 06:33:03 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x826) dup2(r4, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:33:03 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x9c8) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:33:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x4, 0x1, 0x9, 0x1, 0x1, "5c496a1e8d7325fc7c6f14d8626497ed4bc855", 0x0, 0x2}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000340)) 06:33:03 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) (fail_nth: 1) 06:33:03 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48028a01) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:33:04 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48021100) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:33:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x4, 0x1, 0x9, 0x1, 0x1, "5c496a1e8d7325fc7c6f14d8626497ed4bc855", 0x0, 0x2}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000340)) [ 2817.592177] FAULT_INJECTION: forcing a failure. [ 2817.592177] name failslab, interval 1, probability 0, space 0, times 0 [ 2817.594845] CPU: 1 PID: 14766 Comm: syz-executor.6 Not tainted 5.10.224 #1 [ 2817.595498] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2817.596253] Call Trace: [ 2817.596493] dump_stack+0x107/0x167 [ 2817.596824] should_fail.cold+0x5/0xa [ 2817.597258] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2817.597725] ? tty_buffer_alloc+0x243/0x2b0 [ 2817.598159] should_failslab+0x5/0x20 [ 2817.598505] __kmalloc+0x72/0x390 [ 2817.598827] tty_buffer_alloc+0x243/0x2b0 [ 2817.599249] __tty_buffer_request_room+0x156/0x2a0 [ 2817.599692] tty_insert_flip_string_fixed_flag+0x91/0x250 [ 2817.600225] tty_insert_flip_string_and_push_buffer+0x3e/0x160 [ 2817.600752] pty_write+0xe6/0x110 [ 2817.601069] tty_send_xchar+0x29b/0x3c0 [ 2817.601507] ? tty_write_message+0x140/0x140 [ 2817.601906] n_tty_ioctl_helper+0x191/0x3a0 [ 2817.602346] n_tty_ioctl+0x56/0x370 [ 2817.602680] tty_ioctl+0x912/0x18b0 [ 2817.603180] ? n_tty_write_wakeup+0x40/0x40 [ 2817.603565] ? tty_fasync+0x390/0x390 [ 2817.603908] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2817.604639] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2817.605323] ? do_vfs_ioctl+0x283/0x10d0 [ 2817.605685] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2817.606319] ? generic_block_fiemap+0x60/0x60 [ 2817.606726] ? lock_downgrade+0x6d0/0x6d0 [ 2817.607364] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2817.607799] ? wait_for_completion_io+0x270/0x270 [ 2817.607814] ? selinux_file_ioctl+0xb6/0x270 [ 2817.607829] ? tty_fasync+0x390/0x390 [ 2817.607841] __x64_sys_ioctl+0x19a/0x210 [ 2817.607853] do_syscall_64+0x33/0x40 [ 2817.607866] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2817.607875] RIP: 0033:0x7f4b79423b19 [ 2817.607888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2817.607896] RSP: 002b:00007f4b76999188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2817.607910] RAX: ffffffffffffffda RBX: 00007f4b79536f60 RCX: 00007f4b79423b19 [ 2817.607918] RDX: 0000000000000003 RSI: 000000000000540a RDI: 0000000000000003 [ 2817.607926] RBP: 00007f4b769991d0 R08: 0000000000000000 R09: 0000000000000000 06:33:04 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48021200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) 06:33:04 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x48029600) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2817.607933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2817.607941] R13: 00007fffb84486ef R14: 00007f4b76999300 R15: 0000000000022000 [ 2817.607964] [ 2817.607971] ====================================================== [ 2817.607978] WARNING: possible circular locking dependency detected [ 2817.607982] 5.10.224 #1 Not tainted [ 2817.608150] ------------------------------------------------------ [ 2817.608157] syz-executor.6/14766 is trying to acquire lock: [ 2817.608161] ffffffff84f0ce80 (console_owner){-...}-{0:0}, at: console_unlock+0x2e1/0xb40 [ 2817.608176] [ 2817.608180] but task is already holding lock: [ 2817.608184] ffff8880171dd158 (&port->lock){-.-.}-{2:2}, at: tty_insert_flip_string_and_push_buffer+0x2b/0x160 [ 2817.608200] [ 2817.608205] which lock already depends on the new lock. [ 2817.608207] [ 2817.608209] [ 2817.608215] the existing dependency chain (in reverse order) is: [ 2817.608217] [ 2817.608219] -> #2 (&port->lock){-.-.}-{2:2}: [ 2817.608234] _raw_spin_lock_irqsave+0x36/0x60 [ 2817.608239] tty_port_tty_get+0x1f/0x100 [ 2817.608243] tty_port_default_wakeup+0x11/0x40 [ 2817.608248] serial8250_tx_chars+0x51f/0xb00 [ 2817.608253] serial8250_handle_irq+0x4e4/0x660 [ 2817.608259] serial8250_default_handle_irq+0x96/0x210 [ 2817.608263] serial8250_interrupt+0xf4/0x1b0 [ 2817.608269] __handle_irq_event_percpu+0x2ef/0x6d0 06:33:04 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r1, 0x80}, {r2, 0x100}, {r0, 0x400}, {r1, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x9ca) dup2(0xffffffffffffffff, r4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2817.608273] handle_irq_event+0xff/0x280 [ 2817.608278] handle_edge_irq+0x249/0xd00 [ 2817.608283] asm_call_irq_on_stack+0x12/0x20 [ 2817.608287] common_interrupt+0xdd/0x1a0 [ 2817.608292] asm_common_interrupt+0x1e/0x40 [ 2817.608297] _raw_spin_unlock_irqrestore+0x25/0x40 [ 2817.608301] uart_write+0x304/0x580 [ 2817.608305] do_output_char+0x5e8/0x870 [ 2817.608309] n_tty_write+0x4c9/0xfe0 [ 2817.608315] file_tty_write.constprop.0+0x529/0x910 [ 2817.608319] redirected_tty_write+0xa5/0xd0 06:33:04 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x48020200) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x9c8) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:33:04 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x4802f800) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2817.608324] do_iter_readv_writev+0x476/0x750 [ 2817.608329] do_iter_write+0x191/0x700 [ 2817.608333] vfs_writev+0x1ae/0x620 [ 2817.608336] do_writev+0x139/0x300 [ 2817.608340] do_syscall_64+0x33/0x40 [ 2817.608345] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2817.608347] [ 2817.608350] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 2817.608365] _raw_spin_lock_irqsave+0x36/0x60 [ 2817.608370] serial8250_console_write+0x9f5/0xc60 [ 2817.608375] console_unlock+0x82a/0xb40 [ 2817.608379] register_console+0x40c/0x850 [ 2817.608384] univ8250_console_init+0x3a/0x4a [ 2817.608388] console_init+0x24c/0x356 [ 2817.608392] start_kernel+0x2e6/0x489 [ 2817.608397] secondary_startup_64_no_verify+0xbe/0xcb [ 2817.608400] [ 2817.608402] -> #0 (console_owner){-...}-{0:0}: [ 2817.608417] __lock_acquire+0x29e7/0x5b00 [ 2817.608421] lock_acquire+0x197/0x470 [ 2817.608426] console_unlock+0x360/0xb40 [ 2817.608430] vprintk_emit+0x1de/0x4e0 [ 2817.608434] vprintk_func+0x8b/0x140 [ 2817.608438] printk+0xba/0xf1 [ 2817.608442] should_fail+0x47a/0x5a0 06:33:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x100}, {0xffffffffffffffff, 0x400}, {r0, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) unshare(0x48020200) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(r3, r4) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000002010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b00000000"]) 06:33:04 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) unshare(0x4802fe00) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r3) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsa={0x30, 0x12, 0x100, 0x70bd2c, 0x25dfdbfb, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4d2, 0xa, 0x2b}, [@proto={0x5, 0x19, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000007400000000000000010000000000000005000000000000000100008000000000ffff000000000000020000000500000009000000fbffffff040000000000000003000000000000009cbb000000000000040000000000000020000000000000000000000000000000000000000000000000000000007b382c6800000000000000"]) [ 2817.608447] should_failslab+0x5/0x20 [ 2817.608451] __kmalloc+0x72/0x390 [ 2817.608455] tty_buffer_alloc+0x243/0x2b0 [ 2817.608460] __tty_buffer_request_room+0x156/0x2a0 [ 2817.608466] tty_insert_flip_string_fixed_flag+0x91/0x250 [ 2817.608472] tty_insert_flip_string_and_push_buffer+0x3e/0x160 [ 2817.608476] pty_write+0xe6/0x110 [ 2817.608480] tty_send_xchar+0x29b/0x3c0 [ 2817.608485] n_tty_ioctl_helper+0x191/0x3a0 [ 2817.608489] n_tty_ioctl+0x56/0x370 [ 2817.608494] tty_ioctl+0x912/0x18b0 [ 2817.608498] __x64_sys_ioctl+0x19a/0x210 [ 2817.608502] do_syscall_64+0x33/0x40 [ 2817.608507] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2817.608509] [ 2817.608514] other info that might help us debug this: [ 2817.608519] [ 2817.608522] Chain exists of: [ 2817.608525] console_owner --> &port_lock_key --> &port->lock [ 2817.608541] [ 2817.608546] Possible unsafe locking scenario: [ 2817.608548] [ 2817.608553] CPU0 CPU1 [ 2817.608557] ---- ---- [ 2817.608560] lock(&port->lock); [ 2817.608569] lock(&port_lock_key); [ 2817.608579] lock(&port->lock); [ 2817.608587] lock(console_owner); [ 2817.608594] [ 2817.608597] *** DEADLOCK *** [ 2817.608599] [ 2817.608604] 5 locks held by syz-executor.6/14766: [ 2817.608606] #0: ffff888046c83098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x90 [ 2817.608624] #1: ffff888046c83130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: tty_send_xchar+0x1e2/0x3c0 06:33:04 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x80}, {r1, 0x100}, {r0, 0x400}, {0xffffffffffffffff, 0x11}], 0x4, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)=0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)=0x1) dup2(r2, r3) write(r3, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) dup2(0xffffffffffffffff, r5) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000120000012cbd08000000df87a723f51a3622c258df1bfe6a015f6930400fa700000000000800000000800025000600091352363ad37608dfc356ab47e8d5db3dae2cf9441bfe22ecc0c626867c07f01920c139e7036123c47cf29fa515c468c94cb5cc75b59ddb1e993bf0c33b48a4e6b53a10"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f00000014c0)=ANY=[@ANYRES64, @ANYBLOB="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"]) [ 2817.608643] #2: ffff888046c832e8 (&tty->termios_rwsem){++++}-{3:3}, at: tty_send_xchar+0x22f/0x3c0 [ 2817.608660] #3: ffff8880171dd158 (&port->lock){-.-.}-{2:2}, at: tty_insert_flip_string_and_push_buffer+0x2b/0x160 [ 2817.608679] #4: ffffffff84fed200 (console_lock){+.+.}-{0:0}, at: vprintk_func+0x8b/0x140 [ 2817.608696] [ 2817.608698] stack backtrace: [ 2817.608704] CPU: 1 PID: 14766 Comm: syz-executor.6 Not tainted 5.10.224 #1 [ 2817.608711] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2817.608714] Call Trace: [ 2817.608718] dump_stack+0x107/0x167 [ 2817.608722] check_noncircular+0x263/0x2e0 [ 2817.608727] ? stack_trace_consume_entry+0x160/0x160 [ 2817.608732] ? print_circular_bug+0x470/0x470 [ 2817.608735] ? memcpy+0x39/0x60 [ 2817.608739] ? alloc_chain_hlocks+0x342/0x5a0 [ 2817.608744] __lock_acquire+0x29e7/0x5b00 [ 2817.608749] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2817.608753] lock_acquire+0x197/0x470 [ 2817.608757] ? console_unlock+0x2e1/0xb40 [ 2817.608761] ? lock_release+0x680/0x680 [ 2817.608766] ? lock_downgrade+0x6d0/0x6d0 [ 2817.608770] ? do_raw_spin_lock+0x121/0x260 [ 2817.608774] ? rwlock_bug.part.0+0x90/0x90 [ 2817.608778] console_unlock+0x360/0xb40 [ 2817.608783] ? console_unlock+0x2e1/0xb40 [ 2817.608787] ? devkmsg_read+0x730/0x730 [ 2817.608791] ? lock_release+0x680/0x680 [ 2817.608795] ? do_raw_spin_unlock+0x4f/0x220 [ 2817.608798] ? vprintk_func+0x8b/0x140 [ 2817.608801] vprintk_emit+0x1de/0x4e0 [ 2817.608805] vprintk_func+0x8b/0x140 [ 2817.608808] printk+0xba/0xf1 [ 2817.608813] ? record_print_text.cold+0x16/0x16 [ 2817.608817] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2817.608821] should_fail+0x47a/0x5a0 [ 2817.608826] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2817.608830] ? tty_buffer_alloc+0x243/0x2b0 [ 2817.608834] should_failslab+0x5/0x20 [ 2817.608837] __kmalloc+0x72/0x390 [ 2817.608841] tty_buffer_alloc+0x243/0x2b0 [ 2817.608846] __tty_buffer_request_room+0x156/0x2a0 [ 2817.608851] tty_insert_flip_string_fixed_flag+0x91/0x250 [ 2817.608856] tty_insert_flip_string_and_push_buffer+0x3e/0x160 [ 2817.608860] pty_write+0xe6/0x110 [ 2817.608864] tty_send_xchar+0x29b/0x3c0 [ 2817.608868] ? tty_write_message+0x140/0x140 [ 2817.608872] n_tty_ioctl_helper+0x191/0x3a0 [ 2817.608876] n_tty_ioctl+0x56/0x370 [ 2817.608880] tty_ioctl+0x912/0x18b0 [ 2817.608884] ? n_tty_write_wakeup+0x40/0x40 [ 2817.608888] ? tty_fasync+0x390/0x390 [ 2817.608892] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2817.608897] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2817.608901] ? do_vfs_ioctl+0x283/0x10d0 [ 2817.608906] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2817.608910] ? generic_block_fiemap+0x60/0x60 [ 2817.608914] ? lock_downgrade+0x6d0/0x6d0 [ 2817.608918] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2817.608923] ? wait_for_completion_io+0x270/0x270 [ 2817.608927] ? selinux_file_ioctl+0xb6/0x270 [ 2817.608931] ? tty_fasync+0x390/0x390 [ 2817.608936] __x64_sys_ioctl+0x19a/0x210 [ 2817.608939] do_syscall_64+0x33/0x40 [ 2817.608944] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2817.608948] RIP: 0033:0x7f4b79423b19 [ 2817.608963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2817.608968] RSP: 002b:00007f4b76999188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2817.608979] RAX: ffffffffffffffda RBX: 00007f4b79536f60 RCX: 00007f4b79423b19 [ 2817.609202] RDX: 0000000000000003 RSI: 000000000000540a RDI: 0000000000000003 [ 2817.609211] RBP: 00007f4b769991d0 R08: 0000000000000000 R09: 0000000000000000 [ 2817.609218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2817.609225] R13: 00007fffb84486ef R14: 00007f4b76999300 R15: 0000000000022000 06:33:04 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) (fail_nth: 2) [ 2818.043446] FAULT_INJECTION: forcing a failure. [ 2818.043446] name failslab, interval 1, probability 0, space 0, times 0 [ 2818.044509] CPU: 0 PID: 14809 Comm: syz-executor.6 Not tainted 5.10.224 #1 [ 2818.045201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2818.045917] Call Trace: [ 2818.046161] dump_stack+0x107/0x167 [ 2818.046483] should_fail.cold+0x5/0xa [ 2818.046823] ? create_object.isra.0+0x3a/0xa20 [ 2818.047238] should_failslab+0x5/0x20 [ 2818.047580] kmem_cache_alloc+0x5b/0x310 [ 2818.047942] create_object.isra.0+0x3a/0xa20 [ 2818.048337] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2818.048783] __kmalloc+0x16e/0x390 [ 2818.049101] tty_buffer_alloc+0x243/0x2b0 [ 2818.049484] __tty_buffer_request_room+0x156/0x2a0 [ 2818.049918] tty_insert_flip_string_fixed_flag+0x91/0x250 [ 2818.050407] tty_insert_flip_string_and_push_buffer+0x3e/0x160 [ 2818.050927] pty_write+0xe6/0x110 [ 2818.051236] tty_send_xchar+0x29b/0x3c0 [ 2818.051586] ? tty_write_message+0x140/0x140 [ 2818.051980] ? _kstrtoull+0x297/0x550 [ 2818.052321] n_tty_ioctl_helper+0x191/0x3a0 [ 2818.052700] n_tty_ioctl+0x56/0x370 [ 2818.053030] tty_ioctl+0x912/0x18b0 [ 2818.053361] ? n_tty_write_wakeup+0x40/0x40 [ 2818.053754] ? tty_fasync+0x390/0x390 [ 2818.054094] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2818.054605] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2818.055060] ? do_vfs_ioctl+0x283/0x10d0 [ 2818.055420] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2818.055880] ? generic_block_fiemap+0x60/0x60 [ 2818.056284] ? lock_downgrade+0x6d0/0x6d0 [ 2818.056658] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2818.057086] ? wait_for_completion_io+0x270/0x270 [ 2818.057527] ? selinux_file_ioctl+0xb6/0x270 [ 2818.057920] ? tty_fasync+0x390/0x390 [ 2818.058259] __x64_sys_ioctl+0x19a/0x210 [ 2818.058619] do_syscall_64+0x33/0x40 [ 2818.058950] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2818.059411] RIP: 0033:0x7f4b79423b19 [ 2818.059747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2818.061358] RSP: 002b:00007f4b76999188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2818.062023] RAX: ffffffffffffffda RBX: 00007f4b79536f60 RCX: 00007f4b79423b19 [ 2818.062646] RDX: 0000000000000003 RSI: 000000000000540a RDI: 0000000000000003 [ 2818.063268] RBP: 00007f4b769991d0 R08: 0000000000000000 R09: 0000000000000000 [ 2818.063888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2818.064510] R13: 00007fffb84486ef R14: 00007f4b76999300 R15: 0000000000022000 VM DIAGNOSIS: 06:33:04 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88800d975c28 RCX=0000000000000007 RDX=0000000000000000 RSI=ffff88800d975c28 RDI=ffff88800d975c24 RBP=dffffc0000000000 RSP=ffff888053467a98 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000d R11=0000000000000001 R12=ffff88800d975c31 R13=dffffc0000000000 R14=ffff88800d975c24 R15=fffffbfff0ab4130 RIP=ffffffff82000592 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055d504ee45a0 CR3=0000000041032000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffffffff85529ea0 RCX=ffffffff8127e991 RDX=0000000000000001 RSI=0000000000000004 RDI=ffff888048f47bd0 RBP=1ffff110091e8f76 RSP=ffff888048f47ba8 R8 =0000000000000001 R9 =0000000000000003 R10=ffffed10091e8f7a R11=0000000000000001 R12=ffffffff85529ea8 R13=ffffffff85529eb0 R14=ffff88800be01d60 R15=00000000000003ac RIP=ffffffff8127e9a2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ffa7cdd1700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055d504f0d6e0 CR3=000000000eef4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=36706f6f6c2f6b636f6c622f6c617574 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055d504ec74e0000055d504ece2a0 XMM06=000055d504ebe280ffffffff00000003 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000