fff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000100)=ANY=[], 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x7ffff000, 0x811) write$binfmt_elf32(r3, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0xff, 0x20, 0x9, 0x8, 0x3, 0x6, 0x3, 0x2e0, 0x38, 0x140, 0x5b86, 0xfff, 0x20, 0x1, 0x8, 0x3, 0xfffa}, [{0x1, 0x7fff, 0x6170, 0xb9, 0xffffff00, 0xd9, 0x3, 0x5}, {0x10000006, 0xff, 0x3ff, 0x9, 0x8, 0x0, 0x0, 0xea67}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x878) r4 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfdef) sendfile(r1, r2, 0x0, 0x100000001) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r6) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) 10:33:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x1e, 0xc21}, 0x14}}, 0x0) 10:33:26 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) 10:33:26 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 10:33:26 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 10:33:27 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:33:26 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) [ 1090.596299] FAULT_INJECTION: forcing a failure. [ 1090.596299] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.598013] CPU: 0 PID: 7599 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 1090.599057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1090.600166] Call Trace: [ 1090.600521] dump_stack+0x107/0x167 [ 1090.601009] should_fail.cold+0x5/0xa [ 1090.601525] ? create_object.isra.0+0x3a/0xa20 [ 1090.602131] should_failslab+0x5/0x20 [ 1090.602642] kmem_cache_alloc+0x5b/0x310 [ 1090.603187] ? mark_held_locks+0x9e/0xe0 [ 1090.603729] create_object.isra.0+0x3a/0xa20 [ 1090.604309] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1090.604993] kmem_cache_alloc_bulk+0x168/0x320 [ 1090.605608] io_submit_sqes+0x6fe6/0x8610 [ 1090.606175] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1090.606842] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1090.607485] ? find_held_lock+0x2c/0x110 [ 1090.608014] ? io_submit_sqes+0x8610/0x8610 [ 1090.608597] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1090.609237] ? wait_for_completion_io+0x270/0x270 [ 1090.609895] ? rcu_read_lock_any_held+0x75/0xa0 [ 1090.610504] ? vfs_write+0x354/0xb10 [ 1090.610995] ? fput_many+0x2f/0x1a0 [ 1090.611485] ? ksys_write+0x1a9/0x260 [ 1090.611991] ? __ia32_sys_read+0xb0/0xb0 [ 1090.612532] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1090.613234] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1090.613921] do_syscall_64+0x33/0x40 [ 1090.614416] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1090.615093] RIP: 0033:0x7f23efe1fb19 [ 1090.615594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1090.617999] RSP: 002b:00007f23ed395188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1090.619005] RAX: ffffffffffffffda RBX: 00007f23eff32f60 RCX: 00007f23efe1fb19 [ 1090.619946] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1090.620875] RBP: 00007f23ed3951d0 R08: 0000000000000000 R09: 0000000000000000 [ 1090.621823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1090.622752] R13: 00007ffe3b5337ff R14: 00007f23ed395300 R15: 0000000000022000 [ 1090.629483] FAULT_INJECTION: forcing a failure. [ 1090.629483] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.631130] CPU: 0 PID: 7602 Comm: syz-executor.6 Not tainted 5.10.236 #1 [ 1090.632024] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1090.633107] Call Trace: [ 1090.633468] dump_stack+0x107/0x167 [ 1090.633950] should_fail.cold+0x5/0xa [ 1090.634461] ? create_object.isra.0+0x3a/0xa20 [ 1090.635053] should_failslab+0x5/0x20 [ 1090.635552] kmem_cache_alloc+0x5b/0x310 [ 1090.636082] create_object.isra.0+0x3a/0xa20 [ 1090.636652] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1090.637321] kmem_cache_alloc_bulk+0x168/0x320 [ 1090.637932] io_submit_sqes+0x6fe6/0x8610 [ 1090.638493] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1090.639138] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1090.639766] ? find_held_lock+0x2c/0x110 [ 1090.640302] ? io_submit_sqes+0x8610/0x8610 [ 1090.640871] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1090.641521] ? wait_for_completion_io+0x270/0x270 [ 1090.642148] ? rcu_read_lock_any_held+0x75/0xa0 [ 1090.642750] ? vfs_write+0x354/0xb10 [ 1090.643240] ? fput_many+0x2f/0x1a0 [ 1090.643711] ? ksys_write+0x1a9/0x260 [ 1090.644209] ? __ia32_sys_read+0xb0/0xb0 [ 1090.644743] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1090.645441] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1090.646121] do_syscall_64+0x33/0x40 [ 1090.646623] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1090.647288] RIP: 0033:0x7feb0560bb19 [ 1090.647773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1090.650202] RSP: 002b:00007feb02b81188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1090.651188] RAX: ffffffffffffffda RBX: 00007feb0571ef60 RCX: 00007feb0560bb19 [ 1090.652115] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1090.653034] RBP: 00007feb02b811d0 R08: 0000000000000000 R09: 0000000000000000 [ 1090.653968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1090.654894] R13: 00007fff328f512f R14: 00007feb02b81300 R15: 0000000000022000 [ 1090.682582] FAULT_INJECTION: forcing a failure. [ 1090.682582] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.685107] CPU: 1 PID: 7598 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 1090.686566] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1090.688321] Call Trace: [ 1090.688879] dump_stack+0x107/0x167 [ 1090.689653] should_fail.cold+0x5/0xa [ 1090.690459] ? create_object.isra.0+0x3a/0xa20 [ 1090.691439] should_failslab+0x5/0x20 [ 1090.692244] kmem_cache_alloc+0x5b/0x310 [ 1090.693105] ? mark_held_locks+0x9e/0xe0 [ 1090.693977] create_object.isra.0+0x3a/0xa20 [ 1090.694907] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1090.695984] kmem_cache_alloc_bulk+0x168/0x320 [ 1090.696962] io_submit_sqes+0x6fe6/0x8610 [ 1090.697881] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1090.698921] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1090.699940] ? find_held_lock+0x2c/0x110 [ 1090.700801] ? io_submit_sqes+0x8610/0x8610 [ 1090.701730] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1090.702745] ? wait_for_completion_io+0x270/0x270 [ 1090.703762] ? rcu_read_lock_any_held+0x75/0xa0 [ 1090.704734] ? vfs_write+0x354/0xb10 [ 1090.705521] ? fput_many+0x2f/0x1a0 [ 1090.706286] ? ksys_write+0x1a9/0x260 [ 1090.707100] ? __ia32_sys_read+0xb0/0xb0 [ 1090.707961] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1090.709065] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1090.710168] do_syscall_64+0x33/0x40 [ 1090.710950] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1090.712028] RIP: 0033:0x7f3619525b19 [ 1090.712811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1090.716685] RSP: 002b:00007f3616a9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1090.718306] RAX: ffffffffffffffda RBX: 00007f3619638f60 RCX: 00007f3619525b19 [ 1090.719824] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1090.720276] FAULT_INJECTION: forcing a failure. [ 1090.720276] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.721325] RBP: 00007f3616a9b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1090.721336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1090.721347] R13: 00007ffd470aa21f R14: 00007f3616a9b300 R15: 0000000000022000 [ 1090.725653] CPU: 0 PID: 7606 Comm: syz-executor.2 Not tainted 5.10.236 #1 [ 1090.726502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1090.727560] Call Trace: [ 1090.727894] dump_stack+0x107/0x167 [ 1090.728350] should_fail.cold+0x5/0xa [ 1090.728828] ? create_object.isra.0+0x3a/0xa20 [ 1090.729426] should_failslab+0x5/0x20 [ 1090.729909] kmem_cache_alloc+0x5b/0x310 [ 1090.730425] ? mark_held_locks+0x9e/0xe0 [ 1090.730945] create_object.isra.0+0x3a/0xa20 [ 1090.731497] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1090.732140] kmem_cache_alloc_bulk+0x168/0x320 [ 1090.732718] io_submit_sqes+0x6fe6/0x8610 [ 1090.733249] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1090.733893] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1090.734492] ? find_held_lock+0x2c/0x110 [ 1090.734996] ? io_submit_sqes+0x8610/0x8610 [ 1090.735541] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1090.736152] ? wait_for_completion_io+0x270/0x270 [ 1090.736759] ? rcu_read_lock_any_held+0x75/0xa0 [ 1090.737341] ? vfs_write+0x354/0xb10 [ 1090.737815] ? fput_many+0x2f/0x1a0 [ 1090.738266] ? ksys_write+0x1a9/0x260 [ 1090.738750] ? __ia32_sys_read+0xb0/0xb0 [ 1090.739257] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1090.739927] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1090.740582] do_syscall_64+0x33/0x40 [ 1090.741047] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1090.741697] RIP: 0033:0x7f9c6d3e5b19 [ 1090.742159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1090.744453] RSP: 002b:00007f9c6a95b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1090.745426] RAX: ffffffffffffffda RBX: 00007f9c6d4f8f60 RCX: 00007f9c6d3e5b19 [ 1090.746308] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1090.747206] RBP: 00007f9c6a95b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1090.748120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1090.749026] R13: 00007fffa3e9aa4f R14: 00007f9c6a95b300 R15: 0000000000022000 10:33:27 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 10:33:27 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) 10:33:27 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(r0, &(0x7f0000000200)='./file1\x00', 0x206000, 0x18) r1 = eventfd(0x9) fcntl$setlease(r1, 0x400, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r4 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000240)="d9122721a1530ad48adcba50b520b9022f31f323f8394594886cdced35bf05") r5 = eventfd2(0x7, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0x9, 0x0, '\x00', [{0x8, 0x100, 0x6, 0x0, 0x0, 0x4}, {0x7fffffff, 0x6, 0xce67, 0x1, 0x2, 0x20080}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r3, 0x0, 0x100000001) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000280), &(0x7f0000000600)=0x40) 10:33:27 executing program 4: creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) getpgrp(0x0) r1 = dup(0xffffffffffffffff) pidfd_getfd(r1, r0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001d000103000000000000000006000000fb5249e39b34d541c01fd3f43662e9714e9eca3e4b694ae820d481fdb1d9a39f9fe19e2697c95cd7278db5a5d3c54a59dd93f5c18e2058a23dfed8aea42e7fd420205bdcd5984c19707ca140741f5e4487f2e31ee774f07fe7f5a8bec4"], 0x14}}, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x2) 10:33:27 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) 10:33:27 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:33:27 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) [ 1090.915348] FAULT_INJECTION: forcing a failure. [ 1090.915348] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.917009] CPU: 0 PID: 7613 Comm: syz-executor.6 Not tainted 5.10.236 #1 [ 1090.917868] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1090.918894] Call Trace: [ 1090.919238] dump_stack+0x107/0x167 [ 1090.919682] should_fail.cold+0x5/0xa [ 1090.920142] ? create_object.isra.0+0x3a/0xa20 [ 1090.920700] should_failslab+0x5/0x20 [ 1090.921157] kmem_cache_alloc+0x5b/0x310 [ 1090.921660] ? mark_held_locks+0x9e/0xe0 [ 1090.922153] create_object.isra.0+0x3a/0xa20 [ 1090.922689] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1090.923302] kmem_cache_alloc_bulk+0x168/0x320 [ 1090.923857] io_submit_sqes+0x6fe6/0x8610 [ 1090.924375] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1090.924976] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1090.925567] ? find_held_lock+0x2c/0x110 [ 1090.926059] ? io_submit_sqes+0x8610/0x8610 [ 1090.926584] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1090.927165] ? wait_for_completion_io+0x270/0x270 [ 1090.927759] ? rcu_read_lock_any_held+0x75/0xa0 [ 1090.928321] ? vfs_write+0x354/0xb10 [ 1090.928771] ? fput_many+0x2f/0x1a0 [ 1090.929213] ? ksys_write+0x1a9/0x260 [ 1090.929681] ? __ia32_sys_read+0xb0/0xb0 [ 1090.930172] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1090.930808] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1090.931431] do_syscall_64+0x33/0x40 [ 1090.931878] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1090.932498] RIP: 0033:0x7feb0560bb19 [ 1090.932951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1090.935177] RSP: 002b:00007feb02b81188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1090.936100] RAX: ffffffffffffffda RBX: 00007feb0571ef60 RCX: 00007feb0560bb19 [ 1090.936959] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1090.937831] RBP: 00007feb02b811d0 R08: 0000000000000000 R09: 0000000000000000 [ 1090.938693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1090.939555] R13: 00007fff328f512f R14: 00007feb02b81300 R15: 0000000000022000 [ 1090.951328] FAULT_INJECTION: forcing a failure. [ 1090.951328] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.952727] CPU: 0 PID: 7614 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 1090.953595] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1090.954695] Call Trace: [ 1090.955014] dump_stack+0x107/0x167 [ 1090.955456] should_fail.cold+0x5/0xa [ 1090.955915] ? create_object.isra.0+0x3a/0xa20 [ 1090.956473] should_failslab+0x5/0x20 [ 1090.956932] kmem_cache_alloc+0x5b/0x310 [ 1090.957441] ? mark_held_locks+0x9e/0xe0 [ 1090.957935] create_object.isra.0+0x3a/0xa20 [ 1090.958466] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1090.959094] kmem_cache_alloc_bulk+0x168/0x320 [ 1090.959648] io_submit_sqes+0x6fe6/0x8610 [ 1090.960161] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1090.960766] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1090.961347] ? find_held_lock+0x2c/0x110 [ 1090.961852] ? io_submit_sqes+0x8610/0x8610 [ 1090.962375] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1090.962961] ? wait_for_completion_io+0x270/0x270 [ 1090.963545] ? rcu_read_lock_any_held+0x75/0xa0 [ 1090.964107] ? vfs_write+0x354/0xb10 [ 1090.964561] ? fput_many+0x2f/0x1a0 [ 1090.965004] ? ksys_write+0x1a9/0x260 [ 1090.965482] ? __ia32_sys_read+0xb0/0xb0 [ 1090.965976] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1090.966617] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1090.967256] do_syscall_64+0x33/0x40 [ 1090.967711] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1090.968337] RIP: 0033:0x7f23efe1fb19 [ 1090.968791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1090.971034] RSP: 002b:00007f23ed395188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1090.971958] RAX: ffffffffffffffda RBX: 00007f23eff32f60 RCX: 00007f23efe1fb19 [ 1090.972823] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1090.973700] RBP: 00007f23ed3951d0 R08: 0000000000000000 R09: 0000000000000000 [ 1090.974573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1090.975441] R13: 00007ffe3b5337ff R14: 00007f23ed395300 R15: 0000000000022000 [ 1090.989745] loop7: detected capacity change from 0 to 41948160 10:33:27 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) 10:33:27 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 10:33:27 executing program 7: perf_event_open(&(0x7f0000001d80)={0x67f3b10070de2a9f, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x10100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x4000004, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_audit(0x10, 0x3, 0x9) fsetxattr$security_selinux(r0, &(0x7f0000000040), &(0x7f00000000c0)='system_u:object_r:sshd_key_t:s0\x00', 0x20, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000006404000826bd7000fb00df25667a8586ff4bcd629a8985053e6c75f1e1870000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x11) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000001e0011cd00000000000000000000000065c9b837495baa5b107ba925922fcabb78dc64b776ebdd683aa1aedf21e0b320c580998c7d1b1ead362651302063123173a9ff4750f9bd9ed85b5c0cf060d872cdfcb1a9256e2886ef8bca6d93b83396e2faca8675152c7b5bd60e795878814b495e50c4ae67b2288dfa2f765e929d518aa111696c6a19147ed77273920622f75581c3e0051543877e0016e846437eda8acd692acb750c95a7475d21ed269be15425f626435c2508630127ecb651cbeac3ad4e90ebbd69d83bc4eed9a0fa6f3e422a954b4746e1ac9926b696b6643aae35dee58843f6ac6c40559b0ac1321f7fd6"], 0x1c}}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) quotactl(0x9, &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000900)="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") ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001e00)={{}, 0x0, 0x2, @inherit={0x68, &(0x7f00000003c0)={0x0, 0x4, 0x1000, 0x5, {0x21, 0x6, 0x4, 0x8, 0x5}, [0xe3d1, 0x3ff, 0x9, 0x401]}}, @devid}) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c0000001e0000000579a17ded1100000a000000"], 0x1c}}, 0x0) ioctl$CDROMEJECT(0xffffffffffffffff, 0x5309) unshare(0x46020000) [ 1091.170936] FAULT_INJECTION: forcing a failure. [ 1091.170936] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.174462] CPU: 1 PID: 7626 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 1091.175905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1091.177653] Call Trace: [ 1091.178207] dump_stack+0x107/0x167 [ 1091.178981] should_fail.cold+0x5/0xa [ 1091.179971] ? create_object.isra.0+0x3a/0xa20 [ 1091.181092] should_failslab+0x5/0x20 [ 1091.181907] kmem_cache_alloc+0x5b/0x310 [ 1091.182767] ? mark_held_locks+0x9e/0xe0 [ 1091.183629] create_object.isra.0+0x3a/0xa20 [ 1091.184557] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1091.185638] kmem_cache_alloc_bulk+0x168/0x320 [ 1091.186602] io_submit_sqes+0x6fe6/0x8610 [ 1091.187501] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1091.188551] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1091.189581] ? find_held_lock+0x2c/0x110 [ 1091.190441] ? io_submit_sqes+0x8610/0x8610 [ 1091.191360] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1091.192373] ? wait_for_completion_io+0x270/0x270 [ 1091.193400] ? rcu_read_lock_any_held+0x75/0xa0 [ 1091.194383] ? vfs_write+0x354/0xb10 [ 1091.195172] ? fput_many+0x2f/0x1a0 [ 1091.195935] ? ksys_write+0x1a9/0x260 [ 1091.196734] ? __ia32_sys_read+0xb0/0xb0 [ 1091.197597] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1091.198703] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1091.199785] do_syscall_64+0x33/0x40 [ 1091.200568] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1091.201654] RIP: 0033:0x7f3619525b19 [ 1091.202438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1091.206309] RSP: 002b:00007f3616a9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1091.207912] RAX: ffffffffffffffda RBX: 00007f3619638f60 RCX: 00007f3619525b19 [ 1091.209415] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1091.210909] RBP: 00007f3616a9b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1091.212413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1091.213923] R13: 00007ffd470aa21f R14: 00007f3616a9b300 R15: 0000000000022000 [ 1091.225344] FAULT_INJECTION: forcing a failure. [ 1091.225344] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.227019] CPU: 0 PID: 7627 Comm: syz-executor.2 Not tainted 5.10.236 #1 [ 1091.227851] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1091.228866] Call Trace: [ 1091.229188] dump_stack+0x107/0x167 [ 1091.229642] should_fail.cold+0x5/0xa [ 1091.230104] ? create_object.isra.0+0x3a/0xa20 [ 1091.230663] should_failslab+0x5/0x20 [ 1091.231123] kmem_cache_alloc+0x5b/0x310 [ 1091.231617] create_object.isra.0+0x3a/0xa20 [ 1091.232165] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1091.232799] kmem_cache_alloc_bulk+0x168/0x320 [ 1091.233366] io_submit_sqes+0x6fe6/0x8610 [ 1091.233891] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1091.234501] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1091.235096] ? find_held_lock+0x2c/0x110 [ 1091.235593] ? io_submit_sqes+0x8610/0x8610 [ 1091.236120] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1091.236714] ? wait_for_completion_io+0x270/0x270 [ 1091.237301] ? rcu_read_lock_any_held+0x75/0xa0 [ 1091.237871] ? vfs_write+0x354/0xb10 [ 1091.238325] ? fput_many+0x2f/0x1a0 [ 1091.238767] ? ksys_write+0x1a9/0x260 [ 1091.239226] ? __ia32_sys_read+0xb0/0xb0 [ 1091.239721] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1091.240375] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1091.241006] do_syscall_64+0x33/0x40 [ 1091.241467] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1091.242097] RIP: 0033:0x7f9c6d3e5b19 [ 1091.242550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1091.244788] RSP: 002b:00007f9c6a95b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1091.245717] RAX: ffffffffffffffda RBX: 00007f9c6d4f8f60 RCX: 00007f9c6d3e5b19 [ 1091.246592] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1091.247466] RBP: 00007f9c6a95b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1091.247782] audit: type=1326 audit(1746268407.699:21): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7609 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc0087b19 code=0x7ffc0000 [ 1091.248334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1091.248341] R13: 00007fffa3e9aa4f R14: 00007f9c6a95b300 R15: 0000000000022000 [ 1091.286985] audit: type=1326 audit(1746268407.699:22): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7609 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc0087b19 code=0x7ffc0000 [ 1091.293177] audit: type=1326 audit(1746268407.713:23): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7609 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f1fc0087b19 code=0x7ffc0000 [ 1091.302194] audit: type=1326 audit(1746268407.720:24): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7609 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc0087b19 code=0x7ffc0000 [ 1091.320355] audit: type=1326 audit(1746268407.721:25): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7609 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc0087b19 code=0x7ffc0000 [ 1091.337548] FAULT_INJECTION: forcing a failure. [ 1091.337548] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1091.340562] CPU: 1 PID: 7633 Comm: syz-executor.6 Not tainted 5.10.236 #1 [ 1091.342326] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1091.344395] Call Trace: [ 1091.345034] dump_stack+0x107/0x167 [ 1091.345946] should_fail.cold+0x5/0xa [ 1091.346949] __alloc_pages_nodemask+0x182/0x600 [ 1091.348091] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1091.349675] alloc_pages_current+0x187/0x280 [ 1091.350760] allocate_slab+0x26f/0x380 [ 1091.351718] ___slab_alloc+0x470/0x700 [ 1091.352744] ? io_submit_sqes+0x6fe6/0x8610 [ 1091.353888] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 1091.355099] kmem_cache_alloc_bulk+0x1ec/0x320 [ 1091.356184] io_submit_sqes+0x6fe6/0x8610 [ 1091.357256] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1091.358503] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1091.359740] ? io_submit_sqes+0x8610/0x8610 [ 1091.360686] ? recalibrate_cpu_khz+0x10/0x10 [ 1091.361817] ? ktime_get+0x158/0x1f0 [ 1091.362781] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1091.363752] ? clockevents_program_event+0x131/0x360 [ 1091.364930] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1091.366149] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1091.367543] ? trace_hardirqs_on+0x5b/0x180 [ 1091.368648] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1091.370063] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1091.371405] do_syscall_64+0x33/0x40 [ 1091.372369] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1091.373666] RIP: 0033:0x7feb0560bb19 [ 1091.374611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1091.379267] RSP: 002b:00007feb02b81188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1091.381114] RAX: ffffffffffffffda RBX: 00007feb0571ef60 RCX: 00007feb0560bb19 [ 1091.382952] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1091.384723] RBP: 00007feb02b811d0 R08: 0000000000000000 R09: 0000000000000000 [ 1091.386524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1091.388281] R13: 00007fff328f512f R14: 00007feb02b81300 R15: 0000000000022000 [ 1091.421797] FAULT_INJECTION: forcing a failure. [ 1091.421797] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.424845] CPU: 1 PID: 7632 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 1091.426429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1091.428472] Call Trace: [ 1091.429110] dump_stack+0x107/0x167 [ 1091.430050] should_fail.cold+0x5/0xa [ 1091.430955] should_failslab+0x5/0x20 [ 1091.431900] kmem_cache_alloc_bulk+0x4b/0x320 [ 1091.433009] io_submit_sqes+0x6fe6/0x8610 [ 1091.434101] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1091.435319] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1091.436587] ? find_held_lock+0x2c/0x110 [ 1091.437643] ? io_submit_sqes+0x8610/0x8610 [ 1091.438725] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1091.439960] ? wait_for_completion_io+0x270/0x270 [ 1091.441154] ? rcu_read_lock_any_held+0x75/0xa0 [ 1091.442335] ? vfs_write+0x354/0xb10 [ 1091.443258] ? fput_many+0x2f/0x1a0 [ 1091.444194] ? ksys_write+0x1a9/0x260 [ 1091.445138] ? __ia32_sys_read+0xb0/0xb0 [ 1091.446215] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1091.447476] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1091.448739] do_syscall_64+0x33/0x40 [ 1091.449664] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1091.450927] RIP: 0033:0x7f23efe1fb19 [ 1091.451830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1091.456563] RSP: 002b:00007f23ed395188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1091.458339] RAX: ffffffffffffffda RBX: 00007f23eff32f60 RCX: 00007f23efe1fb19 [ 1091.460135] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1091.461937] RBP: 00007f23ed3951d0 R08: 0000000000000000 R09: 0000000000000000 [ 1091.463743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1091.465564] R13: 00007ffe3b5337ff R14: 00007f23ed395300 R15: 0000000000022000 [ 1091.469716] audit: type=1326 audit(1746268407.722:26): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7609 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc0087b19 code=0x7ffc0000 [ 1091.504695] audit: type=1326 audit(1746268407.724:27): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7609 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1fc0087b19 code=0x7ffc0000 [ 1091.537188] audit: type=1326 audit(1746268407.725:28): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7609 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc0087b19 code=0x7ffc0000 [ 1091.569972] audit: type=1326 audit(1746268407.725:29): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7609 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f1fc0087b19 code=0x7ffc0000 [ 1091.589000] audit: type=1326 audit(1746268407.725:30): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7609 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc0087b19 code=0x7ffc0000 10:33:42 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) 10:33:42 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 10:33:42 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) openat(r0, &(0x7f0000000b40)='./file0/../file0\x00', 0x2, 0x12) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x7ffff000, 0x811) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000009c0)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@private}}, &(0x7f0000000b80)=0xffffffffffffffbf) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x3, 0x7, &(0x7f0000000900)=[{&(0x7f0000000400)="b0911e1ce9a650035126d578b71ecad9308ec822cadc400dbe0ad6b9292906f43864cd8db68ade2ea6550b0140ed4829336d5b502774ec2b502b1929d6bfbcb16aadea2ae05c68c9ace9d5097fc5829255b3c9fe33bbc734c607bdb1a6ec7f6df344a560eee1697edc21c3ad231af91d58bf69584f22d67b102cb22b9e626cc9ddfc9e8bbc9fac8450be3cbcd7221fb5f6587c", 0x93, 0x1}, {&(0x7f00000004c0)="4a210d40403272b067fc193413410dcb0ab128487d54b2922dab3fb7e7d85f4d27464d3a1c28a67723cb541139c503ea1ec84a1faf831b2f3342ee89a4658c9309df535c8166afdf2ae6c336330cb6e3483c9d724e29a907c548c836433dd6ad6ea2cee40520c90cea7eb7", 0x6b, 0x1}, {&(0x7f0000000540)="97e597884188a919316ce0d769302bce6a406a587210d90f94655fe44a099ff5dd648d88c6ce27915c4f73d7500f938e99f9447ede106b691b9067c91c13e13b3e937dd1ce377d96eb219b15fa62b8b8319f60497cfd2bd41319753603d03ddd84540def3d30f3a31766af41cd10b4f18a41458d1625390d960d1738fdf8a461f0b29f88fcb345b3bd068a1d12d521885f5488398a4869fd8c4508a4e7ae63be5c6a7e5294be", 0xa6, 0x70}, {&(0x7f0000000340)="2ae1afec1f5e8a862409b5e18e0fd61ac03b742ae9aa242cca16231c562186d26f", 0x21, 0xfffffffffffffffd}, {&(0x7f00000006c0)="ee380dd052a6472092e36920d7bb968342f01315df7a4670bd7cf5ea21209ba3f68420a960bb8720fcbec2f0a1efe64330ca797d0fb2a08100662eac93cb470ff7dc9260f2eb0cb585a818ef357cfa726752544da9048610c20220d85ad3b6b20b27c95612b5815674bb8ba99e92089b9fca9bd259fd5dcfceee259ceeb8dece9a3c47708db2818291612d296b47da6ce1d1244cf02cf944d1bcb8db7df3bad1d1bdbcbb420efdfd1abeaea1de3e9a2639e7393162d4b761", 0xb8, 0xffffffffffff7fff}, {&(0x7f0000000780)="f05f27919aa41bb5075237be033132534dc5568e9be22b50af24b383a01cc7432e28073c631a48396f5678adac5d9f19e294b9ad3886891970c97567c3d84e67e15813f8a8f1254c8dac56d249658d35a358f25fe687520493d11cf1f0a9c54fbc1dc708c3c3c5700e22", 0x6a, 0x6}, {&(0x7f0000000800)="48efadf6a449a236e5bbf500200934b4974559d250051c9561ef8254ec75836f9b4045488e1c348743d6f9b32d7f1e359d894676d43a6c0ae620230af9f0e1d537f9e09a87773dc8762755c6fdc0231250c462a4f5b46576662597d10f3a7a13b1a1b980ebc3fbbaa03945566fd140b56f558f21d7a85f457faaa485172045950ccad69d97f65f3c8cb14aa7b5b7a0b05544430ff5f5912c2fc13073fccf187feac2df49cc437cfe84506292164ba7895096936b1f363940ec54a627b7827785fb39bb2ded5b8dc6857cb2bb436bb752df8c", 0xd2, 0x7fff}], 0x20408, &(0x7f0000000ac0)={[{}], [{@hash}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@obj_role}, {@smackfshat}, {@obj_user={'obj_user', 0x3d, '\'-\\/'}}, {@obj_type={'obj_type', 0x3d, '!(@)\xd5($,'}}, {@measure}, {@uid_lt={'uid<', r2}}]}) mount$bind(&(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x1000, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x4) mount$9p_unix(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20b009, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 10:33:42 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) 10:33:42 executing program 4: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x78, r0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r0}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000080)={@local, 0x78, r4}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8916, &(0x7f0000000000)={@remote, 0x0, r4}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="8e053f46f4b6ce4f66341d2fc83ff91d9e9b4d42f4f91c6d807525b0fd94785ef463ea97f44a424c7eab7ea3ecebbc1190f5a6f1693e8b96b89eb71598cc20e771d31d4989ce4b9a87da95622afe969643b1daf1ef350934ae6b25c512d69e518c3afcde70b453d6f9863666c53bfdd00031d1470aa2e647bdd3a8bb766a1e445d2d842e9c80b09783823ee22cf620fccfd7c9c868e81a7dfb5488986ed9114c27e61cbbbeaa68dce75e47df29c18fdf34f5d979e433cd3511", 0xb9}], 0x1, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r0, @loopback, @loopback}}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}], 0xa0}}], 0x1, 0x8010) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x4, 0x7ff, 0x40, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x7, 0x1, 0x4}}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @multicast1}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000200)={@local}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0b00080013192f262f3f000008000000640101ffff000000fe0000000000000008000a00ac1e00010097d707e5745b31250b610c80a49c19c54400000030190591aa18ca28b2c5b50f229a97715f184bd88b88b8bf5c89b6dafe8d48d48ae250ecf699cb67c0b3c94509ab54332f2bba9011e747924d97881c0083dcfae5d7705a87f95ec6021e9445acf5e9992ce9d735ad68f6c03e1e260cc8f6a074fd22a017a3a94a9aac848e01af319a312b10bad07712457ac4f3cea8ffbc18c9d823cf30e7f3c31111095858430d2d194ee9"], 0x120}}, 0x0) 10:33:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000240)=0x407e, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x49, 0x0}, 0x4000040) sendmmsg$inet6(r0, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@dstopts_2292={{0x18}}], 0x18}}], 0x2, 0x0) 10:33:42 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 10:33:42 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1105.689740] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1105.699543] debugfs: Directory '€˜§°ÇÛ ”uòQÇC !' with parent 'ieee80211' already present! [ 1105.708852] FAULT_INJECTION: forcing a failure. [ 1105.708852] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.709930] FAULT_INJECTION: forcing a failure. [ 1105.709930] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.711488] CPU: 1 PID: 7658 Comm: syz-executor.6 Not tainted 5.10.236 #1 [ 1105.714394] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1105.716142] Call Trace: [ 1105.716702] dump_stack+0x107/0x167 [ 1105.717471] should_fail.cold+0x5/0xa [ 1105.718288] ? create_object.isra.0+0x3a/0xa20 [ 1105.719259] should_failslab+0x5/0x20 [ 1105.720063] kmem_cache_alloc+0x5b/0x310 [ 1105.720915] ? mark_held_locks+0x9e/0xe0 [ 1105.721791] create_object.isra.0+0x3a/0xa20 [ 1105.722724] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1105.723797] kmem_cache_alloc_bulk+0x168/0x320 [ 1105.724778] io_submit_sqes+0x6fe6/0x8610 [ 1105.725698] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1105.726752] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1105.727768] ? find_held_lock+0x2c/0x110 [ 1105.728627] ? io_submit_sqes+0x8610/0x8610 [ 1105.729553] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1105.730575] ? wait_for_completion_io+0x270/0x270 [ 1105.731593] ? rcu_read_lock_any_held+0x75/0xa0 [ 1105.732574] ? vfs_write+0x354/0xb10 [ 1105.733360] ? fput_many+0x2f/0x1a0 [ 1105.734133] ? ksys_write+0x1a9/0x260 [ 1105.734937] ? __ia32_sys_read+0xb0/0xb0 [ 1105.735800] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1105.736902] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1105.738001] do_syscall_64+0x33/0x40 [ 1105.738789] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1105.739866] RIP: 0033:0x7feb0560bb19 [ 1105.740650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1105.744552] RSP: 002b:00007feb02b81188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1105.746161] RAX: ffffffffffffffda RBX: 00007feb0571ef60 RCX: 00007feb0560bb19 [ 1105.747661] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1105.749164] RBP: 00007feb02b811d0 R08: 0000000000000000 R09: 0000000000000000 [ 1105.750676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1105.752181] R13: 00007fff328f512f R14: 00007feb02b81300 R15: 0000000000022000 [ 1105.753722] CPU: 0 PID: 7653 Comm: syz-executor.2 Not tainted 5.10.236 #1 [ 1105.754671] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1105.755808] Call Trace: [ 1105.756180] dump_stack+0x107/0x167 [ 1105.756682] should_fail.cold+0x5/0xa [ 1105.757217] ? create_object.isra.0+0x3a/0xa20 [ 1105.757853] should_failslab+0x5/0x20 [ 1105.758378] kmem_cache_alloc+0x5b/0x310 [ 1105.758940] ? mark_held_locks+0x9e/0xe0 [ 1105.759498] create_object.isra.0+0x3a/0xa20 [ 1105.760103] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1105.760381] FAULT_INJECTION: forcing a failure. [ 1105.760381] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.760797] kmem_cache_alloc_bulk+0x168/0x320 [ 1105.760815] io_submit_sqes+0x6fe6/0x8610 [ 1105.760844] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1105.765022] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1105.765687] ? find_held_lock+0x2c/0x110 [ 1105.766251] ? io_submit_sqes+0x8610/0x8610 [ 1105.766845] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1105.767507] ? wait_for_completion_io+0x270/0x270 [ 1105.768162] ? rcu_read_lock_any_held+0x75/0xa0 [ 1105.768794] ? vfs_write+0x354/0xb10 [ 1105.769304] ? fput_many+0x2f/0x1a0 [ 1105.769800] ? ksys_write+0x1a9/0x260 [ 1105.770325] ? __ia32_sys_read+0xb0/0xb0 [ 1105.770876] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1105.771597] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1105.772306] do_syscall_64+0x33/0x40 [ 1105.772812] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1105.773514] RIP: 0033:0x7f9c6d3e5b19 [ 1105.774023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1105.776545] RSP: 002b:00007f9c6a95b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1105.777585] RAX: ffffffffffffffda RBX: 00007f9c6d4f8f60 RCX: 00007f9c6d3e5b19 [ 1105.778550] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1105.779533] RBP: 00007f9c6a95b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1105.780512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1105.781488] R13: 00007fffa3e9aa4f R14: 00007f9c6a95b300 R15: 0000000000022000 [ 1105.782487] CPU: 1 PID: 7659 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 1105.783947] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1105.786046] Call Trace: [ 1105.786600] dump_stack+0x107/0x167 [ 1105.787368] should_fail.cold+0x5/0xa [ 1105.788163] ? create_object.isra.0+0x3a/0xa20 [ 1105.789129] should_failslab+0x5/0x20 [ 1105.789932] kmem_cache_alloc+0x5b/0x310 [ 1105.790785] ? mark_held_locks+0x9e/0xe0 [ 1105.791648] create_object.isra.0+0x3a/0xa20 [ 1105.792567] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1105.793643] kmem_cache_alloc_bulk+0x168/0x320 [ 1105.794612] io_submit_sqes+0x6fe6/0x8610 [ 1105.795511] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1105.796556] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1105.797581] ? find_held_lock+0x2c/0x110 [ 1105.798434] ? io_submit_sqes+0x8610/0x8610 [ 1105.799342] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1105.800360] ? wait_for_completion_io+0x270/0x270 [ 1105.801371] ? rcu_read_lock_any_held+0x75/0xa0 [ 1105.802347] ? vfs_write+0x354/0xb10 [ 1105.803127] ? fput_many+0x2f/0x1a0 [ 1105.803896] ? ksys_write+0x1a9/0x260 [ 1105.804703] ? __ia32_sys_read+0xb0/0xb0 [ 1105.805583] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1105.806688] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1105.807761] do_syscall_64+0x33/0x40 [ 1105.808539] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1105.809611] RIP: 0033:0x7f23efe1fb19 [ 1105.810389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1105.814261] RSP: 002b:00007f23ed395188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1105.815858] RAX: ffffffffffffffda RBX: 00007f23eff32f60 RCX: 00007f23efe1fb19 [ 1105.817369] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1105.818873] RBP: 00007f23ed3951d0 R08: 0000000000000000 R09: 0000000000000000 [ 1105.820378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1105.821883] R13: 00007ffe3b5337ff R14: 00007f23ed395300 R15: 0000000000022000 [ 1105.832578] FAULT_INJECTION: forcing a failure. [ 1105.832578] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.835198] CPU: 1 PID: 7656 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 1105.835549] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1105.836642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1105.836649] Call Trace: [ 1105.836668] dump_stack+0x107/0x167 [ 1105.836689] should_fail.cold+0x5/0xa [ 1105.841620] ? create_object.isra.0+0x3a/0xa20 [ 1105.842573] should_failslab+0x5/0x20 [ 1105.842592] kmem_cache_alloc+0x5b/0x310 [ 1105.842614] ? mark_held_locks+0x9e/0xe0 [ 1105.844769] create_object.isra.0+0x3a/0xa20 [ 1105.845704] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1105.846656] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 1105.846759] kmem_cache_alloc_bulk+0x168/0x320 [ 1105.848763] io_submit_sqes+0x6fe6/0x8610 [ 1105.849681] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1105.850726] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1105.851744] ? find_held_lock+0x2c/0x110 [ 1105.852599] ? io_submit_sqes+0x8610/0x8610 [ 1105.853505] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1105.854529] ? wait_for_completion_io+0x270/0x270 [ 1105.855538] ? rcu_read_lock_any_held+0x75/0xa0 [ 1105.856511] ? vfs_write+0x354/0xb10 [ 1105.857292] ? fput_many+0x2f/0x1a0 [ 1105.858063] ? ksys_write+0x1a9/0x260 [ 1105.858867] ? __ia32_sys_read+0xb0/0xb0 [ 1105.859726] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1105.860833] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1105.861924] do_syscall_64+0x33/0x40 [ 1105.862707] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1105.863779] RIP: 0033:0x7f3619525b19 [ 1105.864564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1105.868442] RSP: 002b:00007f3616a9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1105.870042] RAX: ffffffffffffffda RBX: 00007f3619638f60 RCX: 00007f3619525b19 [ 1105.871538] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1105.873033] RBP: 00007f3616a9b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1105.874532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1105.876033] R13: 00007ffd470aa21f R14: 00007f3616a9b300 R15: 0000000000022000 [ 1105.877557] CPU: 0 PID: 7652 Comm: syz-executor.4 Not tainted 5.10.236 #1 [ 1105.878483] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1105.879571] Call Trace: [ 1105.879925] dump_stack+0x107/0x167 [ 1105.880404] sysfs_warn_dup.cold+0x1c/0x29 [ 1105.880961] sysfs_do_create_link_sd+0x122/0x140 [ 1105.881601] sysfs_create_link+0x5f/0xc0 [ 1105.882141] device_add+0x703/0x1c50 [ 1105.882630] ? devlink_add_symlinks+0x970/0x970 [ 1105.883233] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 1105.883920] wiphy_register+0x1da6/0x2850 [ 1105.884462] ? wiphy_unregister+0xb90/0xb90 [ 1105.885026] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1105.885719] ieee80211_register_hw+0x23c5/0x38b0 [ 1105.886345] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 1105.886969] ? net_generic+0xdb/0x2b0 [ 1105.887479] ? lockdep_init_map_type+0x2c7/0x780 [ 1105.888088] ? memset+0x20/0x50 [ 1105.888520] ? __hrtimer_init+0x12c/0x270 [ 1105.889067] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 1105.889730] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 1105.890334] ? hwsim_new_radio_nl+0x967/0x1080 [ 1105.890937] ? memcpy+0x39/0x60 [ 1105.891369] hwsim_new_radio_nl+0x991/0x1080 [ 1105.891940] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1105.892627] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 1105.893483] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1105.894341] genl_family_rcv_msg_doit+0x22d/0x330 [ 1105.894963] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1105.895831] ? cap_capable+0x1cd/0x230 [ 1105.896353] ? ns_capable+0xe2/0x110 [ 1105.896848] genl_rcv_msg+0x36a/0x5a0 [ 1105.897356] ? genl_get_cmd+0x480/0x480 [ 1105.897870] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1105.898535] ? lock_release+0x680/0x680 [ 1105.899040] ? netlink_deliver_tap+0xf4/0xcc0 [ 1105.899623] netlink_rcv_skb+0x14b/0x430 [ 1105.900151] ? genl_get_cmd+0x480/0x480 [ 1105.900669] ? netlink_ack+0xab0/0xab0 [ 1105.901171] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1105.901764] ? is_vmalloc_addr+0x7b/0xb0 [ 1105.902291] genl_rcv+0x24/0x40 [ 1105.902718] netlink_unicast+0x54e/0x800 [ 1105.903243] ? netlink_attachskb+0x870/0x870 [ 1105.903818] netlink_sendmsg+0x90f/0xe00 [ 1105.904342] ? netlink_unicast+0x800/0x800 [ 1105.904891] ? netlink_unicast+0x800/0x800 10:33:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000001180)="f2c0b00a0a73e255b2c6", 0xa}], 0x1, 0xff7, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt(r1, 0x5, 0x5, &(0x7f0000000040), &(0x7f00000000c0)) creat(&(0x7f0000000400)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0xd}, 0x100}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x2f, 0x0) [ 1105.905606] __sock_sendmsg+0x154/0x190 [ 1105.906161] ____sys_sendmsg+0x70d/0x870 [ 1105.906686] ? sock_write_iter+0x3d0/0x3d0 [ 1105.907237] ? do_recvmmsg+0x6d0/0x6d0 [ 1105.907758] ___sys_sendmsg+0xf3/0x170 [ 1105.908262] ? sendmsg_copy_msghdr+0x160/0x160 [ 1105.908860] ? __fget_files+0x2cf/0x520 [ 1105.909369] ? lock_downgrade+0x6d0/0x6d0 [ 1105.909918] ? clockevents_program_event+0x14b/0x360 [ 1105.910574] ? __fget_files+0x2f8/0x520 [ 1105.911093] ? __fget_light+0xea/0x290 [ 1105.911605] __sys_sendmsg+0xe5/0x1b0 [ 1105.912103] ? __sys_sendmsg_sock+0x40/0x40 [ 1105.912676] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1105.913381] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1105.914059] ? trace_hardirqs_on+0x5b/0x180 [ 1105.914614] do_syscall_64+0x33/0x40 [ 1105.915089] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1105.915746] RIP: 0033:0x7f1fc0087b19 [ 1105.916225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1105.918589] RSP: 002b:00007f1fbd5fd188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1105.919555] RAX: ffffffffffffffda RBX: 00007f1fc019af60 RCX: 00007f1fc0087b19 [ 1105.920462] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008 [ 1105.921380] RBP: 00007f1fc00e1f6d R08: 0000000000000000 R09: 0000000000000000 [ 1105.922294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1105.923203] R13: 00007ffc6bd7740f R14: 00007f1fbd5fd300 R15: 0000000000022000 [ 1105.936154] loop7: detected capacity change from 0 to 8388096 10:33:42 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) [ 1106.021791] FAULT_INJECTION: forcing a failure. [ 1106.021791] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.023268] CPU: 0 PID: 7671 Comm: syz-executor.6 Not tainted 5.10.236 #1 [ 1106.024120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1106.025131] Call Trace: [ 1106.025456] dump_stack+0x107/0x167 [ 1106.025912] should_fail.cold+0x5/0xa [ 1106.026379] ? create_object.isra.0+0x3a/0xa20 [ 1106.026943] should_failslab+0x5/0x20 [ 1106.027403] kmem_cache_alloc+0x5b/0x310 [ 1106.027901] ? mark_held_locks+0x9e/0xe0 [ 1106.028399] create_object.isra.0+0x3a/0xa20 [ 1106.028933] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1106.029623] kmem_cache_alloc_bulk+0x168/0x320 [ 1106.030289] io_submit_sqes+0x6fe6/0x8610 [ 1106.030805] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1106.031406] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1106.032001] ? find_held_lock+0x2c/0x110 [ 1106.032496] ? io_submit_sqes+0x8610/0x8610 [ 1106.033030] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1106.033627] ? wait_for_completion_io+0x270/0x270 [ 1106.034216] ? rcu_read_lock_any_held+0x75/0xa0 [ 1106.034781] ? vfs_write+0x354/0xb10 [ 1106.035231] ? fput_many+0x2f/0x1a0 [ 1106.035675] ? ksys_write+0x1a9/0x260 [ 1106.036135] ? __ia32_sys_read+0xb0/0xb0 [ 1106.036637] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1106.037285] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1106.037919] do_syscall_64+0x33/0x40 [ 1106.038375] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1106.038999] RIP: 0033:0x7feb0560bb19 [ 1106.039453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1106.041709] RSP: 002b:00007feb02b81188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1106.042635] RAX: ffffffffffffffda RBX: 00007feb0571ef60 RCX: 00007feb0560bb19 [ 1106.043496] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1106.044361] RBP: 00007feb02b811d0 R08: 0000000000000000 R09: 0000000000000000 [ 1106.045220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1106.046086] R13: 00007fff328f512f R14: 00007feb02b81300 R15: 0000000000022000 10:33:42 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) 10:33:42 executing program 4: ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7ff}}, './file0\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000001400000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)) 10:33:42 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) 10:33:42 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000080)=0x3ff, 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x2, 0x1, 0x7, 0x1f, 0x0, 0x3, 0x20010, 0xa, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0x7}, 0x48202, 0x6, 0x0, 0x6, 0x5, 0x3ff, 0x8, 0x0, 0x7fff, 0x0, 0x1f}, 0x0, 0x3, r4, 0xb) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6ff2, &(0x7f00000000c0)={0x0, 0x3c30, 0x18, 0x2, 0x3ad, 0x0, r0}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 1106.215657] FAULT_INJECTION: forcing a failure. [ 1106.215657] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.218199] CPU: 1 PID: 7683 Comm: syz-executor.6 Not tainted 5.10.236 #1 [ 1106.219628] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1106.221383] Call Trace: [ 1106.221955] dump_stack+0x107/0x167 [ 1106.222729] should_fail.cold+0x5/0xa [ 1106.223536] ? create_object.isra.0+0x3a/0xa20 [ 1106.224497] should_failslab+0x5/0x20 [ 1106.225300] kmem_cache_alloc+0x5b/0x310 [ 1106.226180] ? mark_held_locks+0x9e/0xe0 [ 1106.227042] create_object.isra.0+0x3a/0xa20 [ 1106.227964] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1106.229040] kmem_cache_alloc_bulk+0x168/0x320 [ 1106.230018] io_submit_sqes+0x6fe6/0x8610 [ 1106.230930] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1106.231986] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1106.233000] ? find_held_lock+0x2c/0x110 [ 1106.233868] ? io_submit_sqes+0x8610/0x8610 [ 1106.234780] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1106.235792] ? wait_for_completion_io+0x270/0x270 [ 1106.236816] ? rcu_read_lock_any_held+0x75/0xa0 [ 1106.237797] ? vfs_write+0x354/0xb10 [ 1106.238592] ? fput_many+0x2f/0x1a0 [ 1106.239366] ? ksys_write+0x1a9/0x260 [ 1106.240166] ? __ia32_sys_read+0xb0/0xb0 [ 1106.241028] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1106.242143] ? syscall_enter_from_user_mode+0x1d/0x50 10:33:42 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) [ 1106.243380] do_syscall_64+0x33/0x40 [ 1106.244205] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1106.245282] RIP: 0033:0x7feb0560bb19 [ 1106.246074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1106.249946] RSP: 002b:00007feb02b81188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1106.251546] RAX: ffffffffffffffda RBX: 00007feb0571ef60 RCX: 00007feb0560bb19 [ 1106.253052] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1106.254557] RBP: 00007feb02b811d0 R08: 0000000000000000 R09: 0000000000000000 [ 1106.256053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1106.257569] R13: 00007fff328f512f R14: 00007feb02b81300 R15: 0000000000022000 [ 1106.268431] FAULT_INJECTION: forcing a failure. [ 1106.268431] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.269875] CPU: 0 PID: 7684 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 1106.270704] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1106.271721] Call Trace: [ 1106.272050] dump_stack+0x107/0x167 [ 1106.272494] should_fail.cold+0x5/0xa [ 1106.272956] ? create_object.isra.0+0x3a/0xa20 [ 1106.273511] should_failslab+0x5/0x20 [ 1106.273981] kmem_cache_alloc+0x5b/0x310 [ 1106.274476] ? mark_held_locks+0x9e/0xe0 [ 1106.274968] create_object.isra.0+0x3a/0xa20 [ 1106.275503] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1106.276118] kmem_cache_alloc_bulk+0x168/0x320 [ 1106.276679] io_submit_sqes+0x6fe6/0x8610 [ 1106.277192] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1106.277802] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1106.278386] ? find_held_lock+0x2c/0x110 [ 1106.278876] ? io_submit_sqes+0x8610/0x8610 [ 1106.279402] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1106.279986] ? wait_for_completion_io+0x270/0x270 [ 1106.280574] ? rcu_read_lock_any_held+0x75/0xa0 [ 1106.281135] ? vfs_write+0x354/0xb10 [ 1106.281603] ? fput_many+0x2f/0x1a0 [ 1106.282042] ? ksys_write+0x1a9/0x260 [ 1106.282503] ? __ia32_sys_read+0xb0/0xb0 [ 1106.283005] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1106.283639] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1106.284260] do_syscall_64+0x33/0x40 [ 1106.284711] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1106.285337] RIP: 0033:0x7f3619525b19 [ 1106.285795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1106.288024] RSP: 002b:00007f3616a9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1106.288956] RAX: ffffffffffffffda RBX: 00007f3619638f60 RCX: 00007f3619525b19 [ 1106.289828] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1106.290696] RBP: 00007f3616a9b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1106.291559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1106.292429] R13: 00007ffd470aa21f R14: 00007f3616a9b300 R15: 0000000000022000 10:33:42 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 10:33:42 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2a, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32383839333038373500"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000001d72581da2224158b58973c82eb77a3b010000000c00000000000000d7f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500110000000000000000000000040000003c00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="030000001300000023000000ce000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010500)="fffffffffcff0700000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x480, 0xc00}, {&(0x7f0000010a00)="0b0000000c0001022e00000002000000f40302022e2e00"/32, 0x20, 0x1400}, {&(0x7f0000010b00)="00000000000400"/32, 0x20, 0x1800}, {&(0x7f0000010c00)="00000000000400"/32, 0x20, 0x1c00}, {&(0x7f0000010d00)="00000000000400"/32, 0x20, 0x2000}, {&(0x7f0000010e00)="00000000000400"/32, 0x20, 0x2400}, {&(0x7f0000010f00)="00000000000400"/32, 0x20, 0x2800}, {&(0x7f0000011000)="00000000000400"/32, 0x20, 0x2c00}, {&(0x7f0000011100)="00000000000400"/32, 0x20, 0x3000}, {&(0x7f0000011200)="00000000000400"/32, 0x20, 0x3400}, {&(0x7f0000011300)="00000000000400"/32, 0x20, 0x3800}, {&(0x7f0000011400)="00000000000400"/32, 0x20, 0x3c00}, {&(0x7f0000011500)="00000000000400"/32, 0x20, 0x4000}, {&(0x7f0000011600)="504d4d00504d4dffd7f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033300075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x4400}, {&(0x7f0000011700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x4800}, {&(0x7f0000011800)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300"/1056, 0x420, 0x4c00}, {&(0x7f0000011d00)="0400"/32, 0x20, 0x5400}, {&(0x7f0000011e00)="0500"/32, 0x20, 0x5800}, {&(0x7f0000011f00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000007000"/96, 0x60, 0x5c00}, {&(0x7f0000012000)="0200"/32, 0x20, 0x6000}, {&(0x7f0000012100)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x6400}, {&(0x7f0000012200)="0300"/32, 0x20, 0x6800}, {&(0x7f0000012300)="0400"/32, 0x20, 0x6c00}, {&(0x7f0000012400)="0500"/32, 0x20, 0x7000}, {&(0x7f0000012500)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000007000"/96, 0x60, 0x7400}, {&(0x7f0000012600)="0200"/32, 0x20, 0x7800}, {&(0x7f0000012700)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d803050766696c653100"/64, 0x40, 0x7c00}, {&(0x7f0000012800)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8030000000006000000779b539778617474723100000601f00300000000060000007498539778617474723200"/96, 0x60, 0x8000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x83e0}, {&(0x7f0000012a00)="0000000000000000d7f4655fd7f4655fd7f4655f00"/32, 0x20, 0x8c00}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f00000000000004000200000000000800050000000af301000400000000000000000000000100000004000000", 0x40, 0x8c80}, {&(0x7f0000012c00)="8081000000180000d7f4655fd7f4655fd7f4655f00000000000001000c00000010000800000000000af303000400000000000000000000000100000012000000010000000100000018000000020000000400000014000000000000000000000000000000000000000000000000000000000000000000000000000000000000008081000000180000d7f4655fd7f4655fd7f4655f00000000000001000c00000010000800000000000af30300040000000000000000000000010000001900000001000000010000001e00000002000000040000001a00"/224, 0xe0, 0x8d00}, {&(0x7f0000012d00)="c041000000300000d7f4655fd7f4655fd7f4655f00000000000002001800000000000800000000000af301000400000000000000000000000c00000005000000", 0x40, 0x9100}, {&(0x7f0000012e00)="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"/768, 0x300, 0x9180}, {&(0x7f0000013100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x9c00}, {&(0x7f0000013600)='syzkallers\x00'/32, 0x20, 0xa400}, {&(0x7f0000013700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xcc00}], 0x0, &(0x7f0000013800)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x109040, 0x42) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1, {0x7, 0x50b0}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@afid={'afid', 0x3d, 0x10000}}, {@aname={'aname', 0x3d, '\'*.^[&#,:+-\x90)'}}], [{@smackfshat}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}}) 10:33:42 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) 10:33:42 executing program 4: r0 = accept(0xffffffffffffffff, &(0x7f0000000280)=@can, &(0x7f00000001c0)=0x80) shutdown(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)={0x24, 0x42, 0x69844ea0a6ddcd11, 0x0, 0x0, {}, [@typed={0xd, 0x0, 0x0, 0x0, @str='[}\xef(.,)(\x00'}]}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000089}, 0x4000080) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000140)={[{@dmode}]}) [ 1106.450385] FAULT_INJECTION: forcing a failure. [ 1106.450385] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.452915] CPU: 1 PID: 7693 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 1106.454373] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1106.456120] Call Trace: [ 1106.456677] dump_stack+0x107/0x167 [ 1106.457447] should_fail.cold+0x5/0xa [ 1106.458260] should_failslab+0x5/0x20 [ 1106.459060] kmem_cache_alloc_bulk+0x4b/0x320 [ 1106.460007] io_submit_sqes+0x6fe6/0x8610 [ 1106.460914] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1106.461979] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1106.463003] ? find_held_lock+0x2c/0x110 [ 1106.463865] ? io_submit_sqes+0x8610/0x8610 [ 1106.464783] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1106.465829] ? wait_for_completion_io+0x270/0x270 [ 1106.466845] ? rcu_read_lock_any_held+0x75/0xa0 [ 1106.467826] ? vfs_write+0x354/0xb10 [ 1106.468607] ? fput_many+0x2f/0x1a0 [ 1106.469376] ? ksys_write+0x1a9/0x260 [ 1106.470190] ? __ia32_sys_read+0xb0/0xb0 [ 1106.471055] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1106.472170] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1106.473255] do_syscall_64+0x33/0x40 [ 1106.474047] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1106.475128] RIP: 0033:0x7f3619525b19 [ 1106.475908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1106.479836] RSP: 002b:00007f3616a9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1106.481456] RAX: ffffffffffffffda RBX: 00007f3619638f60 RCX: 00007f3619525b19 [ 1106.482973] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1106.484492] RBP: 00007f3616a9b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1106.486010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1106.487522] R13: 00007ffd470aa21f R14: 00007f3616a9b300 R15: 0000000000022000 [ 1106.491784] FAULT_INJECTION: forcing a failure. [ 1106.491784] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.493496] CPU: 0 PID: 7696 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 1106.494345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1106.495353] Call Trace: [ 1106.495678] dump_stack+0x107/0x167 [ 1106.496125] should_fail.cold+0x5/0xa [ 1106.496591] ? xas_alloc+0x336/0x440 [ 1106.497048] should_failslab+0x5/0x20 [ 1106.497509] kmem_cache_alloc+0x5b/0x310 [ 1106.498011] xas_alloc+0x336/0x440 [ 1106.498442] xas_create+0x34a/0x10d0 [ 1106.498897] ? kernel_text_address+0xf2/0x120 [ 1106.499443] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1106.500077] xas_store+0x8c/0x1c40 [ 1106.500516] __xa_store+0x164/0x2d0 [ 1106.500961] ? xa_delete_node+0x280/0x280 [ 1106.501469] ? trace_hardirqs_on+0x5b/0x180 [ 1106.502003] xa_store+0x31/0x50 [ 1106.502409] __io_uring_add_tctx_node+0x1cf/0x520 [ 1106.502994] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1106.503635] __do_sys_io_uring_enter+0x146f/0x1890 [ 1106.504231] ? find_held_lock+0x2c/0x110 [ 1106.504725] ? io_submit_sqes+0x8610/0x8610 [ 1106.505251] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1106.505854] ? wait_for_completion_io+0x270/0x270 [ 1106.506449] ? rcu_read_lock_any_held+0x75/0xa0 [ 1106.507009] ? vfs_write+0x354/0xb10 [ 1106.507460] ? fput_many+0x2f/0x1a0 [ 1106.507897] ? ksys_write+0x1a9/0x260 [ 1106.508360] ? __ia32_sys_read+0xb0/0xb0 [ 1106.508857] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1106.509493] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1106.510124] do_syscall_64+0x33/0x40 [ 1106.510582] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1106.511200] RIP: 0033:0x7f23efe1fb19 [ 1106.511650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1106.513880] RSP: 002b:00007f23ed374188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1106.514809] RAX: ffffffffffffffda RBX: 00007f23eff33020 RCX: 00007f23efe1fb19 [ 1106.515681] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1106.516546] RBP: 00007f23ed3741d0 R08: 0000000000000000 R09: 0000000000000000 [ 1106.517413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1106.518290] R13: 00007ffe3b5337ff R14: 00007f23ed374300 R15: 0000000000022000 [ 1106.535836] FAULT_INJECTION: forcing a failure. [ 1106.535836] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.538719] CPU: 1 PID: 7697 Comm: syz-executor.2 Not tainted 5.10.236 #1 [ 1106.540155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1106.542253] Call Trace: [ 1106.542816] dump_stack+0x107/0x167 [ 1106.543587] should_fail.cold+0x5/0xa [ 1106.544396] ? create_object.isra.0+0x3a/0xa20 [ 1106.545596] should_failslab+0x5/0x20 [ 1106.546413] kmem_cache_alloc+0x5b/0x310 [ 1106.547389] ? mark_held_locks+0x9e/0xe0 [ 1106.548258] create_object.isra.0+0x3a/0xa20 [ 1106.549230] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1106.550563] kmem_cache_alloc_bulk+0x168/0x320 [ 1106.551632] io_submit_sqes+0x6fe6/0x8610 [ 1106.552708] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1106.553772] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1106.554876] ? find_held_lock+0x2c/0x110 [ 1106.555820] ? io_submit_sqes+0x8610/0x8610 [ 1106.556942] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1106.558066] ? wait_for_completion_io+0x270/0x270 [ 1106.559444] ? rcu_read_lock_any_held+0x75/0xa0 [ 1106.560516] ? vfs_write+0x354/0xb10 [ 1106.561483] ? fput_many+0x2f/0x1a0 [ 1106.562408] ? ksys_write+0x1a9/0x260 [ 1106.563306] ? __ia32_sys_read+0xb0/0xb0 [ 1106.564326] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1106.565664] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1106.567063] do_syscall_64+0x33/0x40 [ 1106.568064] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1106.569297] RIP: 0033:0x7f9c6d3e5b19 [ 1106.570240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1106.574814] RSP: 002b:00007f9c6a95b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1106.576772] RAX: ffffffffffffffda RBX: 00007f9c6d4f8f60 RCX: 00007f9c6d3e5b19 [ 1106.578574] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1106.580406] RBP: 00007f9c6a95b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1106.582113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1106.583776] R13: 00007fffa3e9aa4f R14: 00007f9c6a95b300 R15: 0000000000022000 [ 1106.595688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=7699 comm=syz-executor.4 [ 1106.599959] 9pnet: Insufficient options for proto=fd [ 1106.609327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=7699 comm=syz-executor.4 10:33:55 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) 10:33:55 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:33:55 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) 10:33:55 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 10:33:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) 10:33:55 executing program 5: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc1, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x7ffff000, 0x811) syncfs(r1) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x73, 0xed, 0x6, 0xff, 0x0, 0x0, 0x9000c, 0x229cb4b2f76d2ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000000, 0x4, @perf_bp, 0x48984, 0x4, 0x0, 0x6, 0x2, 0x5, 0x30cd, 0x0, 0x0, 0x0, 0xffffffff00000001}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x1) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000380)=ANY=[@ANYBLOB="010059945680c815cef21d000800000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="000000002e0011628799db910e5eae2b6afb3d9d9700000000000000"]) fcntl$dupfd(0xffffffffffffffff, 0x406, r5) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5, 0x32, 0xe7, 0x6, 0x0, 0x3f, 0x10522, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x742f, 0x4, @perf_config_ext={0x6}, 0x10148, 0x6, 0x9, 0x9, 0x9ffa, 0x3, 0x9, 0x0, 0x6, 0x0, 0x3}, 0x0, 0x9, r5, 0x9) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_setup(0x2a7b, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r7, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) 10:33:55 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 10:33:55 executing program 4: keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6c6f61642064656661756c7420747275737400000100000000303098bc623765346400"/51], 0x33, 0xfffffffffffffff9) r0 = syz_io_uring_setup(0x6c6a, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000001080)='./file1\x00', 0x0, 0x12080}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x7ffff000, 0x811) signalfd(r3, &(0x7f0000000180)={[0x1]}, 0x8) [ 1118.959636] FAULT_INJECTION: forcing a failure. [ 1118.959636] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.961647] FAULT_INJECTION: forcing a failure. [ 1118.961647] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.962485] CPU: 0 PID: 7713 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 1118.966150] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1118.968033] Call Trace: [ 1118.968629] dump_stack+0x107/0x167 [ 1118.969465] should_fail.cold+0x5/0xa [ 1118.970343] ? create_object.isra.0+0x3a/0xa20 [ 1118.971381] should_failslab+0x5/0x20 [ 1118.972249] kmem_cache_alloc+0x5b/0x310 [ 1118.973172] create_object.isra.0+0x3a/0xa20 [ 1118.974173] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1118.975327] kmem_cache_alloc_bulk+0x168/0x320 [ 1118.976364] io_submit_sqes+0x6fe6/0x8610 [ 1118.977335] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1118.978476] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1118.979580] ? find_held_lock+0x2c/0x110 [ 1118.980505] ? io_submit_sqes+0x8610/0x8610 [ 1118.981490] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1118.982597] ? wait_for_completion_io+0x270/0x270 [ 1118.983691] ? rcu_read_lock_any_held+0x75/0xa0 [ 1118.984740] ? vfs_write+0x354/0xb10 [ 1118.985582] ? fput_many+0x2f/0x1a0 [ 1118.986413] ? ksys_write+0x1a9/0x260 [ 1118.987285] ? __ia32_sys_read+0xb0/0xb0 [ 1118.988207] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1118.989393] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1118.990571] do_syscall_64+0x33/0x40 [ 1118.991415] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1118.992574] RIP: 0033:0x7f3619525b19 [ 1118.993416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1118.997577] RSP: 002b:00007f3616a9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1118.999313] RAX: ffffffffffffffda RBX: 00007f3619638f60 RCX: 00007f3619525b19 [ 1119.000940] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1119.002552] RBP: 00007f3616a9b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1119.004178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1119.005811] R13: 00007ffd470aa21f R14: 00007f3616a9b300 R15: 0000000000022000 [ 1119.007459] CPU: 1 PID: 7719 Comm: syz-executor.2 Not tainted 5.10.236 #1 [ 1119.008941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1119.010714] Call Trace: [ 1119.011284] dump_stack+0x107/0x167 [ 1119.012061] should_fail.cold+0x5/0xa [ 1119.012868] ? create_object.isra.0+0x3a/0xa20 [ 1119.013849] should_failslab+0x5/0x20 [ 1119.014248] FAULT_INJECTION: forcing a failure. [ 1119.014248] name failslab, interval 1, probability 0, space 0, times 0 [ 1119.014657] kmem_cache_alloc+0x5b/0x310 [ 1119.014683] create_object.isra.0+0x3a/0xa20 [ 1119.018910] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1119.019990] kmem_cache_alloc_bulk+0x168/0x320 [ 1119.020959] io_submit_sqes+0x6fe6/0x8610 [ 1119.021877] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1119.022932] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1119.023969] ? find_held_lock+0x2c/0x110 [ 1119.024832] ? io_submit_sqes+0x8610/0x8610 [ 1119.025763] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1119.026791] ? wait_for_completion_io+0x270/0x270 [ 1119.027814] ? rcu_read_lock_any_held+0x75/0xa0 [ 1119.028794] ? vfs_write+0x354/0xb10 [ 1119.029588] ? fput_many+0x2f/0x1a0 [ 1119.030362] ? ksys_write+0x1a9/0x260 [ 1119.031169] ? __ia32_sys_read+0xb0/0xb0 [ 1119.032038] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1119.033155] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1119.034265] do_syscall_64+0x33/0x40 [ 1119.035058] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1119.036140] RIP: 0033:0x7f9c6d3e5b19 [ 1119.036925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1119.040846] RSP: 002b:00007f9c6a95b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1119.042469] RAX: ffffffffffffffda RBX: 00007f9c6d4f8f60 RCX: 00007f9c6d3e5b19 [ 1119.043991] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1119.045508] RBP: 00007f9c6a95b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1119.047025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1119.048543] R13: 00007fffa3e9aa4f R14: 00007f9c6a95b300 R15: 0000000000022000 [ 1119.050119] CPU: 0 PID: 7714 Comm: syz-executor.6 Not tainted 5.10.236 #1 [ 1119.051678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1119.053554] Call Trace: [ 1119.054161] dump_stack+0x107/0x167 [ 1119.054990] should_fail.cold+0x5/0xa [ 1119.055957] ? create_object.isra.0+0x3a/0xa20 [ 1119.057037] should_failslab+0x5/0x20 [ 1119.057919] kmem_cache_alloc+0x5b/0x310 [ 1119.058847] ? mark_held_locks+0x9e/0xe0 [ 1119.059771] create_object.isra.0+0x3a/0xa20 [ 1119.060762] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1119.061924] kmem_cache_alloc_bulk+0x168/0x320 [ 1119.062962] io_submit_sqes+0x6fe6/0x8610 [ 1119.063929] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1119.065053] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1119.066158] ? find_held_lock+0x2c/0x110 [ 1119.067081] ? io_submit_sqes+0x8610/0x8610 [ 1119.068059] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1119.069155] ? wait_for_completion_io+0x270/0x270 [ 1119.070254] ? rcu_read_lock_any_held+0x75/0xa0 [ 1119.071311] ? vfs_write+0x354/0xb10 [ 1119.072152] ? fput_many+0x2f/0x1a0 [ 1119.072978] ? ksys_write+0x1a9/0x260 [ 1119.073845] ? __ia32_sys_read+0xb0/0xb0 [ 1119.074772] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1119.075968] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1119.077144] do_syscall_64+0x33/0x40 [ 1119.077999] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1119.079157] RIP: 0033:0x7feb0560bb19 [ 1119.079996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1119.084172] RSP: 002b:00007feb02b81188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1119.085923] RAX: ffffffffffffffda RBX: 00007feb0571ef60 RCX: 00007feb0560bb19 [ 1119.087539] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1119.089166] RBP: 00007feb02b811d0 R08: 0000000000000000 R09: 0000000000000000 [ 1119.090801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1119.092429] R13: 00007fff328f512f R14: 00007feb02b81300 R15: 0000000000022000 [ 1119.104620] FAULT_INJECTION: forcing a failure. [ 1119.104620] name failslab, interval 1, probability 0, space 0, times 0 [ 1119.108773] CPU: 0 PID: 7715 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 1119.110355] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1119.112242] Call Trace: [ 1119.112844] dump_stack+0x107/0x167 [ 1119.113669] should_fail.cold+0x5/0xa [ 1119.114547] ? create_object.isra.0+0x3a/0xa20 [ 1119.115596] should_failslab+0x5/0x20 [ 1119.116457] kmem_cache_alloc+0x5b/0x310 [ 1119.117377] ? mark_held_locks+0x9e/0xe0 [ 1119.118312] create_object.isra.0+0x3a/0xa20 [ 1119.119307] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1119.120469] kmem_cache_alloc_bulk+0x168/0x320 [ 1119.121511] io_submit_sqes+0x6fe6/0x8610 [ 1119.122495] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1119.123616] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1119.124708] ? find_held_lock+0x2c/0x110 [ 1119.125633] ? io_submit_sqes+0x8610/0x8610 [ 1119.126626] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1119.127720] ? wait_for_completion_io+0x270/0x270 [ 1119.128818] ? rcu_read_lock_any_held+0x75/0xa0 [ 1119.129875] ? vfs_write+0x354/0xb10 [ 1119.130714] ? fput_many+0x2f/0x1a0 [ 1119.131541] ? ksys_write+0x1a9/0x260 [ 1119.132409] ? __ia32_sys_read+0xb0/0xb0 [ 1119.133330] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1119.134528] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1119.135699] do_syscall_64+0x33/0x40 [ 1119.136547] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1119.137718] RIP: 0033:0x7f23efe1fb19 [ 1119.138560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1119.142718] RSP: 002b:00007f23ed395188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1119.144446] RAX: ffffffffffffffda RBX: 00007f23eff32f60 RCX: 00007f23efe1fb19 [ 1119.146065] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1119.147688] RBP: 00007f23ed3951d0 R08: 0000000000000000 R09: 0000000000000000 [ 1119.149306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1119.150930] R13: 00007ffe3b5337ff R14: 00007f23ed395300 R15: 0000000000022000 10:33:55 executing program 7: stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x200010c, &(0x7f0000000600)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x8, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00') execveat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000000280)=""/254, 0xfe, 0x100) 10:33:55 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) [ 1119.439781] FAULT_INJECTION: forcing a failure. [ 1119.439781] name failslab, interval 1, probability 0, space 0, times 0 [ 1119.442637] CPU: 0 PID: 7734 Comm: syz-executor.2 Not tainted 5.10.236 #1 [ 1119.444188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1119.446057] Call Trace: [ 1119.446652] dump_stack+0x107/0x167 [ 1119.447481] should_fail.cold+0x5/0xa [ 1119.448338] ? create_object.isra.0+0x3a/0xa20 [ 1119.449369] should_failslab+0x5/0x20 [ 1119.450233] kmem_cache_alloc+0x5b/0x310 [ 1119.451159] ? mark_held_locks+0x9e/0xe0 [ 1119.452074] create_object.isra.0+0x3a/0xa20 [ 1119.453058] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1119.454216] kmem_cache_alloc_bulk+0x168/0x320 [ 1119.455253] io_submit_sqes+0x6fe6/0x8610 [ 1119.456212] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1119.457338] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1119.458436] ? find_held_lock+0x2c/0x110 [ 1119.459375] ? io_submit_sqes+0x8610/0x8610 [ 1119.460355] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1119.461438] ? wait_for_completion_io+0x270/0x270 [ 1119.462536] ? rcu_read_lock_any_held+0x75/0xa0 [ 1119.463579] ? vfs_write+0x354/0xb10 [ 1119.464416] ? fput_many+0x2f/0x1a0 [ 1119.465233] ? ksys_write+0x1a9/0x260 [ 1119.466106] ? __ia32_sys_read+0xb0/0xb0 [ 1119.467043] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1119.468223] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1119.469387] do_syscall_64+0x33/0x40 [ 1119.470239] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1119.471396] RIP: 0033:0x7f9c6d3e5b19 [ 1119.472232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1119.476403] RSP: 002b:00007f9c6a95b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1119.478127] RAX: ffffffffffffffda RBX: 00007f9c6d4f8f60 RCX: 00007f9c6d3e5b19 [ 1119.479743] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1119.481348] RBP: 00007f9c6a95b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1119.482961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1119.484563] R13: 00007fffa3e9aa4f R14: 00007f9c6a95b300 R15: 0000000000022000 10:34:08 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:34:08 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) 10:34:08 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) 10:34:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_uring_setup(0x6a32, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r2 = epoll_create1(0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0x4000201f}) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x43, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000300), 0x8}, 0x24, 0x100000, 0x7d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffbfff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000200)={0x20000001}) dup2(r4, r2) waitid(0x0, r1, 0x0, 0x8, 0x0) r5 = creat(&(0x7f0000000000)='./file2\x00', 0x1c) fcntl$setlease(r5, 0x400, 0x1) syz_io_uring_setup(0x3618, &(0x7f0000000100)={0x0, 0xa51f, 0x20, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000008c0)="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", 0x1000, 0x40, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x1}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x40000001, 0x1, {0x1}}, 0x80000000) 10:34:08 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 10:34:08 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) ioctl$CDROMVOLCTRL(r0, 0x5381, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x2) 10:34:08 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x61b8, 0x0, 0x3, 0x0, 0x13, 0xfffffffd, 0xb419}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x20, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4}]}, 0x20}}, 0x0) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x10e) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x20, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4}]}, 0x20}}, 0x0) close_range(r4, r3, 0x2) r5 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0x4) sendmsg$nl_generic(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a0011cd"], 0x1c}, 0x1, 0x0, 0x0, 0x4004804}, 0x20000854) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:34:08 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) [ 1132.119418] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:34:08 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1132.141482] FAULT_INJECTION: forcing a failure. [ 1132.141482] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.144155] CPU: 1 PID: 7747 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 1132.145598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1132.147351] Call Trace: [ 1132.147911] dump_stack+0x107/0x167 [ 1132.148692] should_fail.cold+0x5/0xa [ 1132.149506] ? create_object.isra.0+0x3a/0xa20 [ 1132.150485] should_failslab+0x5/0x20 [ 1132.151283] kmem_cache_alloc+0x5b/0x310 [ 1132.152144] ? mark_held_locks+0x9e/0xe0 [ 1132.152997] create_object.isra.0+0x3a/0xa20 [ 1132.153934] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1132.155027] kmem_cache_alloc_bulk+0x168/0x320 [ 1132.155999] io_submit_sqes+0x6fe6/0x8610 [ 1132.156912] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1132.157970] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1132.158315] FAULT_INJECTION: forcing a failure. [ 1132.158315] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1132.158990] ? find_held_lock+0x2c/0x110 [ 1132.159014] ? io_submit_sqes+0x8610/0x8610 [ 1132.159038] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1132.159068] ? wait_for_completion_io+0x270/0x270 [ 1132.159089] ? rcu_read_lock_any_held+0x75/0xa0 [ 1132.166517] ? vfs_write+0x354/0xb10 [ 1132.167303] ? fput_many+0x2f/0x1a0 [ 1132.168070] ? ksys_write+0x1a9/0x260 [ 1132.168864] ? __ia32_sys_read+0xb0/0xb0 [ 1132.169720] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1132.170840] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1132.171927] do_syscall_64+0x33/0x40 [ 1132.172712] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1132.173786] RIP: 0033:0x7f3619525b19 [ 1132.174576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1132.178436] RSP: 002b:00007f3616a9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1132.180040] RAX: ffffffffffffffda RBX: 00007f3619638f60 RCX: 00007f3619525b19 [ 1132.181544] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1132.183040] RBP: 00007f3616a9b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1132.184536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1132.186051] R13: 00007ffd470aa21f R14: 00007f3616a9b300 R15: 0000000000022000 [ 1132.187582] CPU: 0 PID: 7751 Comm: syz-executor.2 Not tainted 5.10.236 #1 [ 1132.189146] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1132.191027] Call Trace: [ 1132.191627] dump_stack+0x107/0x167 [ 1132.192451] should_fail.cold+0x5/0xa [ 1132.193315] _copy_from_user+0x2e/0x1b0 [ 1132.194234] kstrtouint_from_user+0xbd/0x220 [ 1132.195230] ? kstrtou8_from_user+0x210/0x210 [ 1132.196260] ? lock_acquire+0x197/0x470 [ 1132.197158] ? ksys_write+0x12d/0x260 [ 1132.198036] proc_fail_nth_write+0x78/0x220 [ 1132.199008] ? proc_task_getattr+0x1f0/0x1f0 [ 1132.200009] ? proc_task_getattr+0x1f0/0x1f0 [ 1132.200999] vfs_write+0x29a/0xb10 [ 1132.201820] ksys_write+0x12d/0x260 [ 1132.202653] ? __ia32_sys_read+0xb0/0xb0 [ 1132.203566] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1132.204747] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1132.205917] do_syscall_64+0x33/0x40 [ 1132.206753] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1132.207904] RIP: 0033:0x7f9c6d3985ff [ 1132.208741] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1132.212903] RSP: 002b:00007f9c6a95b170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1132.214632] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9c6d3985ff [ 1132.216255] RDX: 0000000000000001 RSI: 00007f9c6a95b1e0 RDI: 0000000000000006 [ 1132.217875] RBP: 00007f9c6a95b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1132.219495] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1132.221101] R13: 00007fffa3e9aa4f R14: 00007f9c6a95b300 R15: 0000000000022000 [ 1132.229733] FAULT_INJECTION: forcing a failure. [ 1132.229733] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.232471] CPU: 0 PID: 7755 Comm: syz-executor.6 Not tainted 5.10.236 #1 [ 1132.234030] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1132.235907] Call Trace: [ 1132.236507] dump_stack+0x107/0x167 [ 1132.237336] should_fail.cold+0x5/0xa [ 1132.238221] should_failslab+0x5/0x20 [ 1132.239089] kmem_cache_alloc_bulk+0x4b/0x320 [ 1132.240110] io_submit_sqes+0x6fe6/0x8610 [ 1132.241083] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1132.242224] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1132.243326] ? find_held_lock+0x2c/0x110 [ 1132.244251] ? io_submit_sqes+0x8610/0x8610 [ 1132.245234] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1132.246343] ? wait_for_completion_io+0x270/0x270 [ 1132.247448] ? rcu_read_lock_any_held+0x75/0xa0 [ 1132.248503] ? vfs_write+0x354/0xb10 [ 1132.249348] ? fput_many+0x2f/0x1a0 [ 1132.250188] ? ksys_write+0x1a9/0x260 [ 1132.251047] ? __ia32_sys_read+0xb0/0xb0 [ 1132.251964] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1132.253148] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1132.254480] do_syscall_64+0x33/0x40 [ 1132.255322] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1132.256480] RIP: 0033:0x7feb0560bb19 [ 1132.257315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1132.261486] RSP: 002b:00007feb02b81188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1132.263212] RAX: ffffffffffffffda RBX: 00007feb0571ef60 RCX: 00007feb0560bb19 [ 1132.264818] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1132.266424] RBP: 00007feb02b811d0 R08: 0000000000000000 R09: 0000000000000000 [ 1132.268029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1132.269653] R13: 00007fff328f512f R14: 00007feb02b81300 R15: 0000000000022000 [ 1132.291439] FAULT_INJECTION: forcing a failure. [ 1132.291439] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.294418] CPU: 0 PID: 7756 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 1132.296026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1132.297923] Call Trace: [ 1132.298522] dump_stack+0x107/0x167 [ 1132.299350] should_fail.cold+0x5/0xa [ 1132.300209] ? create_object.isra.0+0x3a/0xa20 [ 1132.301247] should_failslab+0x5/0x20 [ 1132.302107] kmem_cache_alloc+0x5b/0x310 [ 1132.303021] ? mark_held_locks+0x9e/0xe0 [ 1132.303943] create_object.isra.0+0x3a/0xa20 [ 1132.304931] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1132.306090] kmem_cache_alloc_bulk+0x168/0x320 [ 1132.307123] io_submit_sqes+0x6fe6/0x8610 [ 1132.308082] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1132.309202] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1132.310295] ? find_held_lock+0x2c/0x110 [ 1132.311216] ? io_submit_sqes+0x8610/0x8610 [ 1132.312193] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1132.313277] ? wait_for_completion_io+0x270/0x270 [ 1132.314380] ? rcu_read_lock_any_held+0x75/0xa0 [ 1132.315423] ? vfs_write+0x354/0xb10 [ 1132.316263] ? fput_many+0x2f/0x1a0 [ 1132.317148] ? ksys_write+0x1a9/0x260 [ 1132.318020] ? __ia32_sys_read+0xb0/0xb0 [ 1132.318945] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1132.320327] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1132.321493] do_syscall_64+0x33/0x40 [ 1132.322341] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1132.323490] RIP: 0033:0x7f23efe1fb19 [ 1132.324337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1132.328508] RSP: 002b:00007f23ed395188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1132.330239] RAX: ffffffffffffffda RBX: 00007f23eff32f60 RCX: 00007f23efe1fb19 [ 1132.331847] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1132.333470] RBP: 00007f23ed3951d0 R08: 0000000000000000 R09: 0000000000000000 [ 1132.335104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1132.336723] R13: 00007ffe3b5337ff R14: 00007f23ed395300 R15: 0000000000022000 10:34:08 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) 10:34:08 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:34:08 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x11, r1, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) syz_io_uring_complete(r2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x5, 0x9, 0x5, 0x0, 0xfffffffffffffab9, 0x2c208, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x19}, 0x40c, 0x6, 0xff, 0x6, 0x7fff, 0x1, 0x6, 0x0, 0x9, 0x0, 0x80000000}, 0xffffffffffffffff, 0xc, r0, 0x2) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) [ 1132.378291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.379958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1132.381707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1132.403413] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:34:08 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 10:34:08 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 10:34:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x2) ftruncate(r0, 0x1000003) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/if_inet6\x00') read(r2, &(0x7f00000002c0)=""/225, 0xe1) socket$nl_route(0x10, 0x3, 0x0) r3 = dup2(r1, r1) write$binfmt_elf64(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x3c7) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x266d40) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r2, r3, r1, r4, 0xffffffffffffffff, r5, r1], 0x7) fcntl$addseals(r2, 0x409, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x200003, 0x0, 0x0, 0x3f}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000100)={{0xffffffffffffffff, 0x3, 0x39, 0x3, 0x8}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=""/45, 0x2d) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) lseek(r6, 0x0, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x200f5ef, 0x0) 10:34:08 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1ff}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000000c0)="75eb79cb2e0052049a6166d085d7ce5bca610079c384f7206de58c303da36f313b6a190f6c52a7ce3594e1e3f4c71713ef77daf271b7073c57e8edd5e929ce7e361782937346a972a106bedbfdc705eec3183240a504750839d2c001afbbefdff045d6898e0fd02e939f573e68a62a0a31", 0x71}, {&(0x7f0000000140)="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", 0xfa}, {&(0x7f0000000240)="0ab40dae4cf0fcb9225f43dc7994769ca3566047396e91d175ca3822580ccfbe770f153669f798c1c3b17f3dce75cedf4cbb8eef51d33c0a999febebb36eff098ceced2494d7e9896b7146", 0x4b}], 0x4, &(0x7f0000000340)=[@hopopts_2292={{0x60, 0x29, 0x36, {0x3c, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x9, [0x6f1d, 0x5, 0xfffffffffffffffb, 0x7]}}, @pad1, @padn={0x1, 0x1, [0x0]}, @jumbo, @enc_lim={0x4, 0x1, 0x3f}, @ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x20}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r1}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x32, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x4}]}}}], 0xa8}}, {{&(0x7f0000000400)={0xa, 0x4e20, 0x5, @mcast1, 0xf18}, 0x1c, &(0x7f0000001840)=[{&(0x7f0000000440)}, {&(0x7f00000014c0)="ae7ec7329322af3d0793f79d63584210e30f384f0bb96dbcbc74a797b7409726070292bba538bce8d19f2af1a27d5fd55decd2c825f8ca51560352ce919fc003ef65192060561b25919b05", 0x4b}, {&(0x7f0000001540)="8c84ed7696c7184e76c67abe4ab361f1d643e7410a825be0db999e809fae4643bc39e7128d609264590c0ecb9a4ea6da925f44df157afdf4c36b89e0a9d9edb8a9bc0d072eb38140d96cab195b807fb2786ef1bbc6b36c72cbc6a130d247e7603999dbb6c799ac248f681c67e52887f5769179c6377d07b21be8dd9d7060abb7b12b9a9ae068f8157d052c01431aad340e4a9647352df4be7d3eee3ded9e1c8f6fbebbda4ee9fe26802cbf31ab9bec9aebe570a2dc2faa3927e9e582f084b70dbecd970843cb6cae8a3792a78efa6d7a5f2b2815c21c4fad5d72d12b1861187095f3712b2cdd6515fb8790aa051c71f1aadfa7", 0xf3}, {&(0x7f0000001640)="30d8514b9315799902c75ef50df33db037739a6c0c0340d042033d96ba7ed0e07b2c65c9827c7b97d9110d5f0b74e7f03aa95015f30a4b4eb2513fa892ecb28d0a77d6d02e9fb9cade6d60de6af9edc4c7eef17c8de9248652812e4560636875edf0d2aae175517ed98c8237e600d0fd1c630b8c8a52af10155d2f19e69644b6eb7f609a01bb52d1dbf6f4801d66b45b11de9ba5534ee4fe00374a4b5e334c9120e0b6a7287d067adb3c357857d5cccd9d2ef20bf4c64439f7b73732e49a31a1fa3d6b", 0xc3}, {&(0x7f0000001740)="5e4efd26144e5aba4e17a33a24a816fa6c2680e8b9aaf99f17525520601a", 0x1e}, {&(0x7f0000001780)="355f4932cf8d70b065aeead2fe97a80ba37e1cd4b144c75efbd3f006ee76513c5b88249d170b3e7cc1dea4880f07d0f87ae1d0130c74d426d0d3e6b1a2ff03a0a428841421a6f2cedc99e9e8213d2a1432d8703715619d308c29f69221b51dfceecb11279c9565b4d785d4c92cd3816d4b699e714f43831a4d1be3138217923d2f79df061cbcf62a80c463b6", 0x8c}], 0x6}}], 0x2, 0x44804) sendmsg$inet6(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@hopopts_2292={{0x38, 0x29, 0x36, {0x2f, 0x3, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0x400, [0x6, 0x7fff]}}, @pad1]}}}], 0x38}, 0x0) [ 1132.591459] FAULT_INJECTION: forcing a failure. [ 1132.591459] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.594237] CPU: 0 PID: 7768 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 1132.595776] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1132.597644] Call Trace: [ 1132.598245] dump_stack+0x107/0x167 [ 1132.599087] should_fail.cold+0x5/0xa [ 1132.599954] should_failslab+0x5/0x20 [ 1132.600814] kmem_cache_alloc_bulk+0x4b/0x320 [ 1132.601828] io_submit_sqes+0x6fe6/0x8610 [ 1132.602799] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1132.603918] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1132.605006] ? find_held_lock+0x2c/0x110 [ 1132.605933] ? io_submit_sqes+0x8610/0x8610 [ 1132.606916] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1132.608000] ? wait_for_completion_io+0x270/0x270 [ 1132.609086] ? rcu_read_lock_any_held+0x75/0xa0 [ 1132.610142] ? vfs_write+0x354/0xb10 [ 1132.610988] ? fput_many+0x2f/0x1a0 [ 1132.611809] ? ksys_write+0x1a9/0x260 [ 1132.612671] ? __ia32_sys_read+0xb0/0xb0 [ 1132.613590] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1132.614771] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1132.615945] do_syscall_64+0x33/0x40 [ 1132.616779] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1132.617950] RIP: 0033:0x7f3619525b19 [ 1132.618801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1132.622977] RSP: 002b:00007f3616a9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1132.624704] RAX: ffffffffffffffda RBX: 00007f3619638f60 RCX: 00007f3619525b19 [ 1132.626324] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1132.627945] RBP: 00007f3616a9b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1132.629559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1132.631179] R13: 00007ffd470aa21f R14: 00007f3616a9b300 R15: 0000000000022000 10:34:09 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1132.698339] FAULT_INJECTION: forcing a failure. [ 1132.698339] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.700970] CPU: 1 PID: 7777 Comm: syz-executor.6 Not tainted 5.10.236 #1 [ 1132.702443] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1132.703763] FAULT_INJECTION: forcing a failure. [ 1132.703763] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.704193] Call Trace: [ 1132.704219] dump_stack+0x107/0x167 [ 1132.704241] should_fail.cold+0x5/0xa [ 1132.704261] ? create_object.isra.0+0x3a/0xa20 [ 1132.704282] should_failslab+0x5/0x20 [ 1132.704300] kmem_cache_alloc+0x5b/0x310 [ 1132.704319] ? mark_held_locks+0x9e/0xe0 [ 1132.704348] create_object.isra.0+0x3a/0xa20 [ 1132.713276] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1132.714359] kmem_cache_alloc_bulk+0x168/0x320 [ 1132.715329] io_submit_sqes+0x6fe6/0x8610 [ 1132.716233] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1132.717284] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1132.718308] ? find_held_lock+0x2c/0x110 [ 1132.719168] ? io_submit_sqes+0x8610/0x8610 [ 1132.720077] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1132.721100] ? wait_for_completion_io+0x270/0x270 [ 1132.722122] ? rcu_read_lock_any_held+0x75/0xa0 [ 1132.723112] ? vfs_write+0x354/0xb10 [ 1132.723914] ? fput_many+0x2f/0x1a0 [ 1132.724687] ? ksys_write+0x1a9/0x260 [ 1132.725498] ? __ia32_sys_read+0xb0/0xb0 [ 1132.726373] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1132.727486] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1132.728575] do_syscall_64+0x33/0x40 [ 1132.729361] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1132.730447] RIP: 0033:0x7feb0560bb19 [ 1132.731235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1132.735156] RSP: 002b:00007feb02b81188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1132.736770] RAX: ffffffffffffffda RBX: 00007feb0571ef60 RCX: 00007feb0560bb19 [ 1132.738291] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1132.739798] RBP: 00007feb02b811d0 R08: 0000000000000000 R09: 0000000000000000 [ 1132.741309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1132.742833] R13: 00007fff328f512f R14: 00007feb02b81300 R15: 0000000000022000 [ 1132.744380] CPU: 0 PID: 7775 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 1132.745952] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1132.747834] Call Trace: [ 1132.748443] dump_stack+0x107/0x167 [ 1132.749270] should_fail.cold+0x5/0xa [ 1132.750232] ? create_object.isra.0+0x3a/0xa20 [ 1132.751349] should_failslab+0x5/0x20 [ 1132.752223] kmem_cache_alloc+0x5b/0x310 [ 1132.753148] ? mark_held_locks+0x9e/0xe0 [ 1132.754085] create_object.isra.0+0x3a/0xa20 [ 1132.755083] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1132.756240] kmem_cache_alloc_bulk+0x168/0x320 [ 1132.757287] io_submit_sqes+0x6fe6/0x8610 [ 1132.758272] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1132.759423] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1132.760521] ? find_held_lock+0x2c/0x110 [ 1132.761450] ? io_submit_sqes+0x8610/0x8610 [ 1132.762445] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1132.763538] ? wait_for_completion_io+0x270/0x270 [ 1132.764627] ? rcu_read_lock_any_held+0x75/0xa0 [ 1132.765677] ? vfs_write+0x354/0xb10 [ 1132.766533] ? fput_many+0x2f/0x1a0 [ 1132.767361] ? ksys_write+0x1a9/0x260 [ 1132.768225] ? __ia32_sys_read+0xb0/0xb0 [ 1132.769148] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1132.770344] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1132.771520] do_syscall_64+0x33/0x40 [ 1132.772370] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1132.773537] RIP: 0033:0x7f23efe1fb19 [ 1132.774396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1132.778575] RSP: 002b:00007f23ed395188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1132.780298] RAX: ffffffffffffffda RBX: 00007f23eff32f60 RCX: 00007f23efe1fb19 [ 1132.781920] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1132.783531] RBP: 00007f23ed3951d0 R08: 0000000000000000 R09: 0000000000000000 [ 1132.785146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1132.786769] R13: 00007ffe3b5337ff R14: 00007f23ed395300 R15: 0000000000022000 10:34:09 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) 10:34:09 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) 10:34:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)={0x24, 0x42, 0x69844ea0a6ddcd11, 0x0, 0x0, {}, [@typed={0xd, 0x0, 0x0, 0x0, @str='[}\xef(.,)(\x00'}]}, 0x24}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="00012bbd7000fddbdf25430000000c0058001500000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x200080c0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x30, 0x2d, 0x2c, 0x2c]}}}}]}) 10:34:09 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1133.049774] tmpfs: Bad value for 'mpol' 10:34:09 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:34:09 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{0x0}, {&(0x7f0000001d80)=""/4102, 0x1006}], 0x2}}], 0x1, 0x4100, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x7ffff000, 0x811) sendto(r1, &(0x7f0000000140)="b0e060063780b8474e7da28b9f14d2969fd7c33488ac5cde31f4148cf616be5bf9a8ad47ad1058f5203e6b9f46a5dba1abcffc8faae574546d368c2609a84c7351f91f14f98462535a7a911af2409e06d3059e62b31a30e71d2b638ead51b203daf3f1c17f84c9034c508d6ed02c305a4d1752336f33dee804ee0adefd0ab7e48a1ca52221784a8ab10af7e6e9887f851779df8539a798ae63906d5134a6aeb4619edde5", 0xa4, 0x8040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 1133.079667] FAULT_INJECTION: forcing a failure. [ 1133.079667] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.082300] CPU: 1 PID: 7798 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 1133.083753] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1133.085492] Call Trace: [ 1133.086072] dump_stack+0x107/0x167 [ 1133.086835] should_fail.cold+0x5/0xa [ 1133.087640] ? create_object.isra.0+0x3a/0xa20 [ 1133.088601] should_failslab+0x5/0x20 [ 1133.089409] kmem_cache_alloc+0x5b/0x310 [ 1133.090273] ? mark_held_locks+0x9e/0xe0 [ 1133.091131] create_object.isra.0+0x3a/0xa20 [ 1133.092050] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1133.093144] kmem_cache_alloc_bulk+0x168/0x320 [ 1133.094127] io_submit_sqes+0x6fe6/0x8610 [ 1133.095021] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1133.096065] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1133.097073] ? find_held_lock+0x2c/0x110 [ 1133.097938] ? io_submit_sqes+0x8610/0x8610 [ 1133.098842] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1133.099859] ? wait_for_completion_io+0x270/0x270 [ 1133.100869] ? rcu_read_lock_any_held+0x75/0xa0 [ 1133.101854] ? vfs_write+0x354/0xb10 [ 1133.102646] ? fput_many+0x2f/0x1a0 [ 1133.103413] ? ksys_write+0x1a9/0x260 [ 1133.104207] ? __ia32_sys_read+0xb0/0xb0 [ 1133.105061] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1133.106160] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1133.107252] do_syscall_64+0x33/0x40 [ 1133.108033] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1133.109103] RIP: 0033:0x7f3619525b19 [ 1133.109897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1133.113748] RSP: 002b:00007f3616a9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1133.115352] RAX: ffffffffffffffda RBX: 00007f3619638f60 RCX: 00007f3619525b19 [ 1133.116862] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1133.118360] RBP: 00007f3616a9b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1133.119857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1133.121355] R13: 00007ffd470aa21f R14: 00007f3616a9b300 R15: 0000000000022000 10:34:09 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x10000) syz_io_uring_setup(0x8003a75, &(0x7f0000000080)={0x0, 0xa91f, 0x10, 0x0, 0x3be}, &(0x7f0000623000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r3}}, 0x7ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) syz_io_uring_setup(0x8003a75, &(0x7f0000000080)={0x0, 0xa91f, 0x10, 0x0, 0x3be}, &(0x7f0000623000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r7}}, 0x7ff) syz_io_uring_submit(0x0, r6, &(0x7f0000001a00)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10060, 0x0, {0x3, r3}}, 0xdc4c) chdir(&(0x7f0000000300)='./file2\x00') vmsplice(r0, &(0x7f0000000500)=[{&(0x7f00000001c0)="e6905188856fde4b5ad1e25010189d5dc7", 0x11}, {&(0x7f0000000200)="c715b7f93bffd2198a29cdf25ddb467e7af3243693107b576b4d5cbf571edb8ec7866a73c2ff629268994bd1827eb46b6dab0597b638162bcf35dd2d7bc697db7cb4", 0x42}, {&(0x7f0000000340)="b1dfbd018d53f9c5baf0931f6f9872b634e57bf1cdaf7bc477a180da6badc197870ac44f5f885780980463076a19047f32a0c0466d3e2a76c753257671ca7bc2924a7cadb53857d76483189ff649dd28b4e98a239c5e2d291b", 0x59}, {&(0x7f0000000400)="70a5db8c593a19b64ad80bd07af793a8975932a249554896749979de9c52aa5ecb8d0af39ce6c1fbc1b37bf8ecf8ba0b96e1a791be94b50403642c907654a522d9df3c9eb698b7a814f0da697d3ef76d783035c72543473cf6f78df79fa536c0cec77b4d13145169d95a67610ad54bd0e4b466305ba323ec839778eea5c9bf78ba79330734b0f1453bc308fb2a1d77a91ba7a9a9e53bbe84d7d9f599b7d9f019c6c61c04afbd40c4e5a1a0", 0xab}, {&(0x7f0000000280)="767abdcdb1fe468dc8505b57a21ba00c5c567836a717b87dfa2fe5cbc1edd02bb31374552a3daea4b96360f46945f484fa9c99440ce69948ee35fd4153f6", 0x3e}, {&(0x7f0000000640)="78e19c10db8576b233721312b70ec3b9966f96bb33c7f6e1a9a52332e33b2223e96fa99186ef6c6ca92730e5313623c70ae0746fd6be82b3aa551d0d405bfc2592b1738d78004ba0b648692bcef0fea3d01891ef0f7068f60a53cff819a3c7f9f9653c3da7acccf8961e00714678c7905d17d87e460d91c385402a91cbad94fee44b6ff6e6bc5a6d5a30d96ccc7c4a9fe9c01f0a46cf14d783f9fb9b55a80c235d2187f43abd867d2442e275091ec8c0f12392d87e1f0600d80de9c085ea3f5f5ff71220eee6ffce586242690498d9058c31b708b0d06018f11d4db57e621e87507aafc9b89310e8478ca523dfc85ef23a7ee7172a9f410d53af3276e7f960f2a5a131fb45fcc51824132abd1a8d93274d617ff5c1ba42773f866bd8cca7a1e3292fe24df01842e7ae5920e7a985bcfc8e9730411891b4bccb327eb17d36992a3123e5f4a1767ec921e88093d5938072965c2c351fc37cf955efa0419052089e9a1af6b9a3f8fb8b926880f914bdbf72699f41c997e2c683426e2ad1ec3d0c6f28b7497bc89c5627371fba092d1d58f3ca72556293cc7e552e0eabd258c4365635ca68b0c9da8519dae7268c11a94d2ffd3c5e25aad3752e92141c4cf24816353922585afec26742f7cf9ae05f2b21002d27725f34033868a7b3caa473d9e3a9ea4098e76454f44d9b89953b5b47219742c9aeb7fe688455230b95a04dfd40080ee12791fd655dc5e52da4cb2dc1e979b86cbe36aa023d8afdc5b3725358030ee41a127e3c4f8392d297288779d904f85c60d7fa056d1272cd7a1a0eb8d538d071e3c26ef0bd4a181cbf9bc3a6023036c47630cb8dea65b4c6623c764c7f2bf954336d07ba9576af6b69015750530c9f0d30d6298099daa531b59a643536e0a9e21231c8b9034e6faa73545b070f0517509d2720394a4f007d542cfa652a42eba43dffce62de6d349e98397ac25767076fc7b9782032d08f6daae03f2fd9a347953a7a06d277cc0b4d938663c4bad8734c11a09f688f85ec832260668ef32a064b9c1d581c8e719299811f9621be78cc6a094adfb7782b77469724ebe4676b7eb9c9bee97484e6a89806819fbf15bd322ba1baa6b0036635d2cfed2ab66d214970ca8dac1da9d095ec402fb80a2d5e90409c22c24e9c6774b0204da6e9986155730b2a8f8d15565afe729dfad717c7724f59fbec0d31ca9ec74f3683bc06f4d6d8f67175c8530289c7f11f5603e0a7795ad4292fc2fd0db536d742cdfff23735cff07ec641c38189fe519d44eaf2336f41135349596ebf19a22924d291a13a373a3591c996b71470e9fde8018ee69cd948d0731f91dfd7c3233fdac9cccbf5022265805c711bbe63f7eda4f4fdef4b0ce7d60312e898fb0e7a786572a1d12a002b968c683bbeb6bc0b3e2b8d83e7e6f478a0ffb0259ae4a0a04453785a5815ae97d2b914ba3c92065f6d233695329768bb18ef69bde9b379bdb55273e7d54bf65483fbb86817455d056db04c55d86e4e71e32ac2b055127849b6e4a291eed648d0d983861743e903fd465ca8ee0b2fa31e21c229f8126b79659313ebf7181fd65476eaf8526bf6b0cb6c1b6444a67fac43962c1b7805dd004f7b6373af07ee8c936c52657e4590e04d5f5fbba704ea9396a6ea843453354f031960551923c2a45203814407a486dcd83deccad4c2d7fead6a011fb3fb6bdad325743481badff10cb5d82eb4078f432c24972a1dd86b0332f88e01f64bc1ef189252d92bdd982e1f189fbc163608a582cfd46c82a6e87a9d52b6c6b38abf3411383991b7c6d28b32786f618f92cf8339dabf16cfc25f8475504ada468accffb140ac530f38792ca2361ec2e089f5010c4418172ebf499808f5236348ed03c97f65d43e407fdeb9eb8e3c465021e8abf9694d05610abb40511bb83aff43ba309b223140105a8ae86ddd0a37aedeba0480e632d300b54a4b780f1c9afcb8a1c97fb997d2d166f0f077d04349c5499bca407e336ea00d972e28b62fa102e6ba40009b06485408595d9ec13577998aad34c2a114376de19611fd4df08f75d2424e2c0fc1a9d1c898aff41fe0c972b68533ccf37b7814293339c636e49b2bc2bdc51b6ff2971d540e3af3b1bfcfc478d4bf41b5d73ccb5e4cda417361f82ad650abcfa6a1660dbcde23af2f1b4d7dc7fba831f93ac777549f1a5ca59700406755f3c313a38be2c5c481e9f5acbcf604eec4ed5534a9425b446003a649065bdb98707a71b6b9e858c0742e955d5e22feaa0f07abf258252674575aea3f61e135c288f04de1a75d77b852130b2f727792491a9dbf59c673a7c345005d46c720625778bad25a19a84bac9fcf74c785b24216a6372f05ecaa40b461d4a192f39fd7c1e4802521c45d77566708ac3d47e4eceab8875d43f45483ab787e61ea2d89050413c8d58c0c4f8db8eb88e74642fa6c820ebb477306505175dc45213b58cf4fb7d4ae30662b7f03b6c6a6189b63e0bca20b247a2b999b07e7a5e0de35f323fac7d8d9a10bf1608e039fdec2b7699db1b329e8bc717528e4bb8c8db04ecf49e9a2cecea62ebc815646accf34d34c08cfaa82185a3ec1644dc8f77a78f7a307b7f406563f2e6087db896478a2635f3d64811a3f4ede3960d1d25ec7e55b11e8e232bc48403daa1ef7b2a6cfc94ccff4b0b9fb63b064b16abdfb2ea25ee576fd4391fa5a4a1268ffedd3667c1e1f2751166364bcd3ea88d9f2e3b494f2d80f73b50b960b0b6d456c89f9a0f010e7e3158783bb4dcd2b83cf18b8a883c0e73c8a9f1c86dab89e544fde6b19558998990c440a84fafaa98dc19ad830faa58242fb9b3601c75219446c4042ecac896a00a26b19f753e19e07381732de7cd6ba9e4a9afda3a62ac37fa1f56486661555cf7dd12f8a79edd978d3f6a000edce512c3be000df38aa65433ec194afab6e7ac185cf1c6fc14a1e43e5b5900ce2b4d0ff0ec695c6f10af15b157387bca83948bc1cdc7735bc2e7cfabfd4b5cbd7da9b8d368d0f50c0e0b4ebf63ef4818de333d9d8e38b64b68207b4ffbe110e4c66ca8d3649a37c0f063c46762e3fe5244f1adb7aeb077e508ff354c4444dd70cc5257b02e987ded6738dd3e19967124af150fa0e1dc51242fe63936ce1e1548a3072c819d81073092f7589fa876bccb3b2335ecfd3baba45337f11fb12246c769c51b9fb63bdc457541452d96d3aa7a4c12a348411426e31cd3fc48420a2168e3f7d09d7634f9a1d74a6fb7f8f7f3a8ab91d9e8a35528400ea1f17024d6ee3e75142dfd582e4f76006f929058be129e834114c99beeebb27abb0b694b39ddad1e6c649103da3ca9f28759e479b7b37247e18b0bcb0d1ba401ca48c63fd18679add2d6cb6e4b450d6c81fdc89c273938e8e44383fe9b6f80d3256ddd0b1ca8232dcb27cc37bb2590ae43f890a456be14320b2d25de1ccbcd64ec8a0943f26b95e1bf322936ef25ebd7ff07b304ea8c6796f2562df8403c62cb4adeea4b3f82ef8a50239dd41d90e537fa9828b1e87b01dd7ff6679d2d373236de0df46f6b60d2a992830a260ce1404589c7ffecf78a08a96c3a3cf5fc8799841ddee44bd22ce9a7cd19dea90a74e799f12ac4e7ec19227762392905b1f9d6848f77514373702fa72f6a73ea7bb2d3d9e3e6ef66e66c46d7fea4e24df06dff20993bac3debcdbce6b770ce8cfbfb60d40ef1cf7d7a04a633be668b42a34f6ac3d2fadb5797af80edf1c624bb95478e4049b4582c8837f7df0adab3de66e2e3db040f3d22ac36162dfbb7f183fc8eea27275949f656176f0ac9d384bdfea73a32928253e9b514e95131fc198f2a7bdc6c8aade131bfccef3a6d70ffe0aa4ae8d397aaf4fe5197fa114fd5bf0eed5c4a7e1a0a32c993586112b7edb1d68a690915b33a8409d2dd317e86436b01d4fe37a5fb4570e85dcda5d4575a31caadf1ea4f8ad60c34ca68466b011c68c573d9eed2514bf88abcf6cc0eb77e0bab0a3e94cdd327f8d2fd24cc29a3f3c6aa0cf29ccded1f2fd7f03ebb52ed1c57bf8610161bdb039801adadd60bf39e5b2e1a45d34075b6c28fd86619df89ffc1e2a3df1834c05743d99ee2f8ae045becc04c5526b5239af3d35b405b22b7ea6979e3e5462041c9e93f0ac6bd0bfcf822d22ddce3436d9467fb353ab95742c543d07faef9952290a473d3f325cb7f6ae75efaa899b18c76fc0bad276ccadc4dc726aace8da6a550ddb2c8396ac20138ef3b35a7b76ad150371c379a70ee54d3c44a6e7e2f7febe7154f71c6762c4a84157cfc1b174d0e43eeeab7f70f3cabbc2177cd9253142004897343f3af5506708120e099c9d9473ddae6b1320f48b12f04a901e69529a13b97280dac811c324542294bef669f65fbe9e15e0f023c200b90f3e14f396adbd18e8b38c2e84dd5e73264a0d665afe3caf09f9ba6573236209447b5b3c9f11f59f294acc20de6f95898cc579b79095f854f3fe2b15a5ad72d61aeca12d9b62c74de67437af77a9d3bc4e53cc7cf3a073120cf9b419ebba0ef3613301cfd8c8f19d253b8f21160c801424fdbd0730896e20e1e887a26d4320abd9aae656c7cbc67ce93bb2e155e9100f96c6e291ed76b0d7d55fab008659cb507461e2972bb7a0e82e3424dc87c965667c0c9589556c925ed6b56d0d1400fdf421424265da9df523d93ff91483138b54b4bf3aa0eddb201463930232e1cd606612b6bd96d61743c3c3c8ebb535f1e602df1f55c54bf33d4053a806ebf3909f42bcc8244f519c9ea05bcbe9f8d888f8b1d65e218e534b05cb9ec48dea73fa807b1e0568b15e075ffffbb07e201584e9ee6082194862b4d07d4bf9b68c0c554f503a2fafc595c3158683c54aeeafe5eadd76e9166e0c6d54c4ccea60ecdd486e4fb5af542d39a4daf42ce6d614d824a0c1d5069135d63334199aab9c2d1ab6089e3f62ee405436feacb9cf171282b302edaf9efc51a8007a04b29d40650dd490a8add51b4496091443c781cb7bc056dcf872523017ce04fe1f9b81e0ba50b31ea36d76fc2edc7e76da9b15e7cac40aae72e4cccbde7ea10cb6ddacb6c6c247f0fdbe61a7150b43e9fc40e72aaf53f45c531a6d313444ec1bb4863d6ff99b822e2aa9c7014cc30a6492376f1069b09cd2f6127e79992036da8c4cda3bdcc3934a0f2eb08453d053939d00deff833bdb02938a28a20645d2e50e6b0ed072ac2875347f7eeb6ce3766d43fd25c1c84f31aa71e5f82618bcf581b39b64b66eb0b09ef91c8bdcad1cc9853d775818e4ca3cbc9599c215af2c7553e4ede74b49383b2ee53c30423147cbd35e6467cc7a9cb0409564b81a7fd64d8af1aae5e5bdbff5891cda51cc98b4704d6178e94cb70ee090defb79510ee5091b203d7b9bb636cf4a3d2c742108dfbfa1245a2ba3f7c7d1c842a12a7e2db84a9e58c223b8550de5b5871dca2293a9451ef5f1908e0cafd35786c4a0f3948bbb1abe5cece8b1091e45d0b5fc055dece4d449e9ab19f6c300e9aa373e5056b856683a47a57c2469ad90f43855e453361559b4cc46efbff04ee7ffcf6850722ff168f7300311e0509b42154947bf781e8995a9d656c40664922b5553d444376021b6c1ec0411b459ee73673a0a4877b55a96dd7f845d8ef6a86174583e192ff82195240105438cdf4bb7da9a027474b68b754e946b0861ce222a8e675678a5e518491e571af3d9d0ec007ac5137eaf42ebd30eb7f4d395a2aad30005f0c0d8050934194bd9d629007d30458d50a78ab2c0fd4707139074dbd6901f43bdaaf83c14d93ccff758bd", 0x1000}], 0x6, 0x3) futimesat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x0) utimes(&(0x7f00000003c0)='./mnt\x00', &(0x7f0000000600)={{}, {0x77359400}}) [ 1133.132350] FAULT_INJECTION: forcing a failure. [ 1133.132350] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.136241] CPU: 1 PID: 7800 Comm: syz-executor.6 Not tainted 5.10.236 #1 [ 1133.137709] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1133.139654] Call Trace: [ 1133.140212] dump_stack+0x107/0x167 [ 1133.141156] should_fail.cold+0x5/0xa [ 1133.142179] ? create_object.isra.0+0x3a/0xa20 [ 1133.143225] should_failslab+0x5/0x20 [ 1133.144191] kmem_cache_alloc+0x5b/0x310 [ 1133.145286] ? mark_held_locks+0x9e/0xe0 [ 1133.146239] create_object.isra.0+0x3a/0xa20 [ 1133.147245] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1133.148609] kmem_cache_alloc_bulk+0x168/0x320 [ 1133.149672] io_submit_sqes+0x6fe6/0x8610 [ 1133.150591] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1133.151641] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1133.152666] ? find_held_lock+0x2c/0x110 [ 1133.153529] ? io_submit_sqes+0x8610/0x8610 [ 1133.154466] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1133.155493] ? wait_for_completion_io+0x270/0x270 [ 1133.156513] ? rcu_read_lock_any_held+0x75/0xa0 [ 1133.157498] ? vfs_write+0x354/0xb10 [ 1133.158301] ? fput_many+0x2f/0x1a0 [ 1133.159068] ? ksys_write+0x1a9/0x260 [ 1133.159877] ? __ia32_sys_read+0xb0/0xb0 [ 1133.160737] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1133.161838] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1133.162935] do_syscall_64+0x33/0x40 [ 1133.163721] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1133.164816] RIP: 0033:0x7feb0560bb19 [ 1133.165601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1133.169483] RSP: 002b:00007feb02b81188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1133.171106] RAX: ffffffffffffffda RBX: 00007feb0571ef60 RCX: 00007feb0560bb19 [ 1133.172642] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1133.174169] RBP: 00007feb02b811d0 R08: 0000000000000000 R09: 0000000000000000 [ 1133.175683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1133.177198] R13: 00007fff328f512f R14: 00007feb02b81300 R15: 0000000000022000 10:34:09 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) 10:34:09 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000005e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x48040, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001100)=ANY=[@ANYBLOB="180000000400210c0b95074744ff6a4f32972f154819d18079650f7fd1f1fffeb799f405d3ca9dbf72ad4d0900000000000000c194248887d58c83ea7fe52897eca16a81c30e866ba0cc6606bb720700bb637adb9413abd81a12f7"], 0x18}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000b, 0x110, r2, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000001080)=@IORING_OP_CLOSE={0x13, 0x5}, 0x101) pread64(r2, &(0x7f0000000040)=""/4126, 0x101e, 0x2000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4126, 0x101e, 0x2000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r4) [ 1133.331096] loop7: detected capacity change from 0 to 41948160 [ 1133.448575] FAULT_INJECTION: forcing a failure. [ 1133.448575] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.450550] CPU: 0 PID: 7816 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 1133.451686] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1133.453085] Call Trace: [ 1133.453538] dump_stack+0x107/0x167 [ 1133.454166] should_fail.cold+0x5/0xa [ 1133.454794] ? create_object.isra.0+0x3a/0xa20 [ 1133.455560] should_failslab+0x5/0x20 [ 1133.456192] kmem_cache_alloc+0x5b/0x310 [ 1133.456871] ? mark_held_locks+0x9e/0xe0 [ 1133.457548] create_object.isra.0+0x3a/0xa20 [ 1133.458297] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1133.459130] kmem_cache_alloc_bulk+0x168/0x320 [ 1133.459897] io_submit_sqes+0x6fe6/0x8610 [ 1133.460613] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1133.461434] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1133.462360] ? find_held_lock+0x2c/0x110 [ 1133.463033] ? io_submit_sqes+0x8610/0x8610 [ 1133.463753] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1133.464551] ? wait_for_completion_io+0x270/0x270 [ 1133.465360] ? rcu_read_lock_any_held+0x75/0xa0 [ 1133.466128] ? vfs_write+0x354/0xb10 [ 1133.466738] ? fput_many+0x2f/0x1a0 [ 1133.467348] ? ksys_write+0x1a9/0x260 [ 1133.467976] ? __ia32_sys_read+0xb0/0xb0 [ 1133.468650] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1133.469520] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1133.470390] do_syscall_64+0x33/0x40 [ 1133.471004] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1133.471848] RIP: 0033:0x7f3619525b19 [ 1133.472457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1133.475511] RSP: 002b:00007f3616a9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1133.476755] RAX: ffffffffffffffda RBX: 00007f3619638f60 RCX: 00007f3619525b19 [ 1133.477923] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1133.479099] RBP: 00007f3616a9b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1133.480262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1133.481438] R13: 00007ffd470aa21f R14: 00007f3616a9b300 R15: 0000000000022000 10:34:22 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 10:34:22 executing program 5: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x4000, 0x40, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x448, 0x0, 0x402, 0x8, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x69) io_setup(0x3, &(0x7f0000000200)=0x0) r2 = inotify_init1(0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x43) dup3(r3, r2, 0x0) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, r2, &(0x7f0000000080)="9b092f6d4da7d173fbc970301e3efff493a04ced5782a5cd6755bbcc95af47e62284", 0x22, 0x100000000}, &(0x7f0000000180)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x300, 0x38) socket$inet6_udplite(0xa, 0x2, 0x88) 10:34:22 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r0, 0x4, 0x8, 0x7ff, 0x3}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000140)=0xc) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x2, 0x58, 0xff, 0x3, 0x0, 0x7, 0x80080, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x10001, 0x2, @perf_config_ext={0x7, 0x2}, 0x11201, 0x3, 0x2, 0x9, 0x8, 0x5, 0x1000, 0x0, 0x300, 0x0, 0x7}, r3, 0xe, 0xffffffffffffffff, 0xa) sendto(r2, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x6359, 0x4) recvmmsg(r2, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000240), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x80, 0xba, 0x0, 0x8, 0x0, 0x2c0fdfc1, 0x400, 0xc, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x8}, 0x2009, 0x1, 0x4d316067, 0x69f91a7c1b7d48ab, 0x5616698d, 0x7f, 0x1}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0xb) 10:34:22 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) 10:34:22 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xf5, 0x0, 0x0, 0x0) 10:34:22 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(r0, &(0x7f0000000200)='./file1\x00', 0x206000, 0x18) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) utimes(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={{0x0, 0x2710}, {0x77359400}}) write$P9_RREADLINK(r1, &(0x7f0000000100)=ANY=[], 0x10) r3 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) r4 = open$dir(&(0x7f0000000240)='./file1\x00', 0x20000, 0x50) r5 = openat(r4, &(0x7f0000000280)='./file0\x00', 0x4042, 0x15) mkdirat(r5, &(0x7f00000003c0)='./file1\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x100000001) 10:34:22 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:34:22 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) [ 1146.089716] FAULT_INJECTION: forcing a failure. [ 1146.089716] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.091216] CPU: 1 PID: 7839 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 1146.092076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1146.093115] Call Trace: [ 1146.093445] dump_stack+0x107/0x167 [ 1146.093900] should_fail.cold+0x5/0xa [ 1146.094385] ? create_object.isra.0+0x3a/0xa20 [ 1146.094961] should_failslab+0x5/0x20 [ 1146.095440] kmem_cache_alloc+0x5b/0x310 [ 1146.095949] ? mark_held_locks+0x9e/0xe0 [ 1146.096464] create_object.isra.0+0x3a/0xa20 [ 1146.097010] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1146.097650] kmem_cache_alloc_bulk+0x168/0x320 [ 1146.098241] io_submit_sqes+0x6fe6/0x8610 [ 1146.098771] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1146.099385] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1146.099991] ? find_held_lock+0x2c/0x110 [ 1146.100497] ? io_submit_sqes+0x8610/0x8610 [ 1146.101035] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1146.101640] ? wait_for_completion_io+0x270/0x270 [ 1146.102247] ? rcu_read_lock_any_held+0x75/0xa0 [ 1146.102821] ? vfs_write+0x354/0xb10 [ 1146.103284] ? fput_many+0x2f/0x1a0 [ 1146.103740] ? ksys_write+0x1a9/0x260 [ 1146.104214] ? __ia32_sys_read+0xb0/0xb0 [ 1146.104723] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1146.105424] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1146.106091] do_syscall_64+0x33/0x40 [ 1146.106594] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1146.107232] RIP: 0033:0x7f23efe1fb19 [ 1146.107698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1146.109968] RSP: 002b:00007f23ed395188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1146.110924] RAX: ffffffffffffffda RBX: 00007f23eff32f60 RCX: 00007f23efe1fb19 [ 1146.111870] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1146.112775] RBP: 00007f23ed3951d0 R08: 0000000000000000 R09: 0000000000000000 [ 1146.113672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1146.114577] R13: 00007ffe3b5337ff R14: 00007f23ed395300 R15: 0000000000022000 10:34:22 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1146.130413] FAULT_INJECTION: forcing a failure. [ 1146.130413] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.133421] CPU: 0 PID: 7837 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 1146.134988] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1146.136866] Call Trace: [ 1146.137461] dump_stack+0x107/0x167 [ 1146.138290] should_fail.cold+0x5/0xa [ 1146.139155] ? create_object.isra.0+0x3a/0xa20 [ 1146.140188] should_failslab+0x5/0x20 [ 1146.141042] kmem_cache_alloc+0x5b/0x310 [ 1146.141956] ? mark_held_locks+0x9e/0xe0 [ 1146.142874] create_object.isra.0+0x3a/0xa20 [ 1146.143855] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1146.145008] kmem_cache_alloc_bulk+0x168/0x320 [ 1146.146045] io_submit_sqes+0x6fe6/0x8610 [ 1146.147003] ? __do_sys_io_uring_enter+0x6b2/0x1890 10:34:22 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) [ 1146.148136] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1146.149314] ? find_held_lock+0x2c/0x110 [ 1146.150277] ? io_submit_sqes+0x8610/0x8610 [ 1146.151289] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1146.152389] ? wait_for_completion_io+0x270/0x270 [ 1146.153485] ? rcu_read_lock_any_held+0x75/0xa0 [ 1146.154536] ? vfs_write+0x354/0xb10 [ 1146.155373] ? fput_many+0x2f/0x1a0 [ 1146.156193] ? ksys_write+0x1a9/0x260 [ 1146.157058] ? __ia32_sys_read+0xb0/0xb0 [ 1146.157973] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1146.159161] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1146.160334] do_syscall_64+0x33/0x40 [ 1146.161177] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1146.162341] RIP: 0033:0x7f3619525b19 [ 1146.163186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1146.167346] RSP: 002b:00007f3616a9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1146.169062] RAX: ffffffffffffffda RBX: 00007f3619638f60 RCX: 00007f3619525b19 [ 1146.170677] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1146.172291] RBP: 00007f3616a9b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1146.173892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1146.175517] R13: 00007ffd470aa21f R14: 00007f3616a9b300 R15: 0000000000022000 [ 1146.179442] kauditd_printk_skb: 11 callbacks suppressed [ 1146.179462] audit: type=1400 audit(1746268462.630:42): avc: denied { watch_reads } for pid=7825 comm="syz-executor.5" path="/syzkaller-testdir690431585/syzkaller.HcZ9qv/141/file0" dev="sda" ino=16036 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 [ 1146.181319] FAULT_INJECTION: forcing a failure. [ 1146.181319] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.186650] CPU: 0 PID: 7835 Comm: syz-executor.6 Not tainted 5.10.236 #1 [ 1146.188263] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1146.190136] Call Trace: [ 1146.190740] dump_stack+0x107/0x167 [ 1146.191558] should_fail.cold+0x5/0xa [ 1146.192419] ? create_object.isra.0+0x3a/0xa20 [ 1146.193448] should_failslab+0x5/0x20 [ 1146.194317] kmem_cache_alloc+0x5b/0x310 [ 1146.195221] ? mark_held_locks+0x9e/0xe0 [ 1146.196129] create_object.isra.0+0x3a/0xa20 [ 1146.197111] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1146.198263] kmem_cache_alloc_bulk+0x168/0x320 [ 1146.199297] io_submit_sqes+0x6fe6/0x8610 [ 1146.200249] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1146.201362] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1146.202460] ? io_submit_sqes+0x8610/0x8610 [ 1146.203427] ? recalibrate_cpu_khz+0x10/0x10 [ 1146.204408] ? ktime_get+0x158/0x1f0 [ 1146.205250] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1146.206224] ? clockevents_program_event+0x131/0x360 [ 1146.207379] ? tick_program_event+0xa8/0x140 [ 1146.208371] ? hrtimer_interrupt+0x771/0x9b0 [ 1146.209380] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1146.210571] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1146.211725] do_syscall_64+0x33/0x40 [ 1146.212559] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1146.213711] RIP: 0033:0x7feb0560bb19 [ 1146.214554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1146.218685] RSP: 002b:00007feb02b81188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1146.220397] RAX: ffffffffffffffda RBX: 00007feb0571ef60 RCX: 00007feb0560bb19 [ 1146.222000] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1146.223613] RBP: 00007feb02b811d0 R08: 0000000000000000 R09: 0000000000000000 [ 1146.225212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1146.226828] R13: 00007fff328f512f R14: 00007feb02b81300 R15: 0000000000022000 [ 1146.432536] FAULT_INJECTION: forcing a failure. [ 1146.432536] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.435672] CPU: 0 PID: 7852 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 1146.437209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1146.439085] Call Trace: [ 1146.439680] dump_stack+0x107/0x167 [ 1146.440506] should_fail.cold+0x5/0xa [ 1146.441362] ? create_object.isra.0+0x3a/0xa20 [ 1146.442405] should_failslab+0x5/0x20 [ 1146.443258] kmem_cache_alloc+0x5b/0x310 [ 1146.444176] ? mark_held_locks+0x9e/0xe0 [ 1146.445094] create_object.isra.0+0x3a/0xa20 [ 1146.446094] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1146.447242] kmem_cache_alloc_bulk+0x168/0x320 [ 1146.448280] io_submit_sqes+0x6fe6/0x8610 [ 1146.449242] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1146.450379] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1146.451469] ? find_held_lock+0x2c/0x110 [ 1146.452388] ? io_submit_sqes+0x8610/0x8610 [ 1146.453367] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1146.454462] ? wait_for_completion_io+0x270/0x270 [ 1146.455550] ? rcu_read_lock_any_held+0x75/0xa0 [ 1146.456589] ? vfs_write+0x354/0xb10 [ 1146.457428] ? fput_many+0x2f/0x1a0 [ 1146.458254] ? ksys_write+0x1a9/0x260 [ 1146.459112] ? __ia32_sys_read+0xb0/0xb0 [ 1146.460036] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1146.461208] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1146.462380] do_syscall_64+0x33/0x40 [ 1146.463211] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1146.464362] RIP: 0033:0x7f23efe1fb19 [ 1146.465197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1146.469351] RSP: 002b:00007f23ed395188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1146.471079] RAX: ffffffffffffffda RBX: 00007f23eff32f60 RCX: 00007f23efe1fb19 [ 1146.472693] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1146.474312] RBP: 00007f23ed3951d0 R08: 0000000000000000 R09: 0000000000000000 [ 1146.475928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1146.477535] R13: 00007ffe3b5337ff R14: 00007f23ed395300 R15: 0000000000022000 10:34:36 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 10:34:36 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="6c42b34d541c8ba15a7548b966278e0b9527b9e3dfa1e5701dcfcb3d344d328cab54f4a08dfe30fe401de16db867c4119fc889aa07725abbb8e980de49edf6626062dcc6dc0f8277933bc5568a95935077007356f00db9c259e490ee32f527b30b34a3ea02ac8ac27d9706952a6f5a68a468f0c17edca465c9d679dcbc228ce9992d718915a562fec8ef1ee073efe4629b9b1be7fa5d4762b963569a77eb3454b520339ff88e04688f0fffcef11feac2417c8ab2380666cda07c2c1f0fdee154cf94"]) io_uring_enter(r4, 0x647c, 0xad9f, 0x2, &(0x7f0000000240)={[0x5]}, 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000080)=0x3ff, 0x4) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r3, &(0x7f00000000c0)={0x80000000}) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) 10:34:36 executing program 4: clock_gettime(0x2, &(0x7f0000000000)={0x0, 0x0}) nanosleep(&(0x7f0000000040)={r0, r1+60000000}, &(0x7f0000000080)) clock_gettime(0x3, &(0x7f00000000c0)) 10:34:36 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 10:34:36 executing program 5: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x24508) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/94, 0x5e}, {&(0x7f0000000080)=""/52, 0x34}, {&(0x7f0000000180)=""/134, 0x86}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/57, 0x39}], 0x6, 0x1, 0x4) mkdirat(r0, &(0x7f0000001440)='./file1\x00', 0x108) unlinkat(r0, &(0x7f00000000c0)='./file1\x00', 0x200) 10:34:36 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) 10:34:36 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:34:36 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) [ 1160.138559] FAULT_INJECTION: forcing a failure. [ 1160.138559] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.140032] CPU: 1 PID: 7867 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 1160.140844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1160.141842] Call Trace: [ 1160.142162] dump_stack+0x107/0x167 [ 1160.142604] should_fail.cold+0x5/0xa [ 1160.143057] ? create_object.isra.0+0x3a/0xa20 [ 1160.143602] should_failslab+0x5/0x20 [ 1160.144049] kmem_cache_alloc+0x5b/0x310 [ 1160.144528] ? mark_held_locks+0x9e/0xe0 [ 1160.145009] create_object.isra.0+0x3a/0xa20 [ 1160.145528] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1160.146125] kmem_cache_alloc_bulk+0x168/0x320 [ 1160.146674] io_submit_sqes+0x6fe6/0x8610 [ 1160.147176] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1160.147767] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1160.148338] ? find_held_lock+0x2c/0x110 [ 1160.148832] ? io_submit_sqes+0x8610/0x8610 [ 1160.149341] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1160.149914] ? wait_for_completion_io+0x270/0x270 [ 1160.150493] ? rcu_read_lock_any_held+0x75/0xa0 [ 1160.151038] ? vfs_write+0x354/0xb10 [ 1160.151480] ? fput_many+0x2f/0x1a0 [ 1160.151905] ? ksys_write+0x1a9/0x260 [ 1160.152355] ? __ia32_sys_read+0xb0/0xb0 [ 1160.152844] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1160.153463] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1160.154071] do_syscall_64+0x33/0x40 [ 1160.154535] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1160.155136] RIP: 0033:0x7f3619525b19 [ 1160.155577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1160.157723] RSP: 002b:00007f3616a9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1160.158617] RAX: ffffffffffffffda RBX: 00007f3619638f60 RCX: 00007f3619525b19 [ 1160.159446] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1160.160280] RBP: 00007f3616a9b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1160.161115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1160.161969] R13: 00007ffd470aa21f R14: 00007f3616a9b300 R15: 0000000000022000 10:34:36 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1160.213403] FAULT_INJECTION: forcing a failure. [ 1160.213403] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.216263] CPU: 0 PID: 7873 Comm: syz-executor.6 Not tainted 5.10.236 #1 [ 1160.217821] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1160.219703] Call Trace: [ 1160.220303] dump_stack+0x107/0x167 [ 1160.221133] should_fail.cold+0x5/0xa [ 1160.221992] ? create_object.isra.0+0x3a/0xa20 [ 1160.223034] should_failslab+0x5/0x20 [ 1160.223893] kmem_cache_alloc+0x5b/0x310 [ 1160.224808] ? mark_held_locks+0x9e/0xe0 [ 1160.225738] create_object.isra.0+0x3a/0xa20 [ 1160.226738] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1160.227885] kmem_cache_alloc_bulk+0x168/0x320 [ 1160.228924] io_submit_sqes+0x6fe6/0x8610 [ 1160.229890] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1160.231018] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1160.232105] ? find_held_lock+0x2c/0x110 [ 1160.233029] ? io_submit_sqes+0x8610/0x8610 [ 1160.234004] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1160.235107] ? wait_for_completion_io+0x270/0x270 [ 1160.236196] ? rcu_read_lock_any_held+0x75/0xa0 [ 1160.237240] ? vfs_write+0x354/0xb10 [ 1160.238078] ? fput_many+0x2f/0x1a0 [ 1160.238910] ? ksys_write+0x1a9/0x260 [ 1160.239772] ? __ia32_sys_read+0xb0/0xb0 [ 1160.240693] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1160.241891] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1160.243075] do_syscall_64+0x33/0x40 [ 1160.243926] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1160.245076] RIP: 0033:0x7feb0560bb19 [ 1160.245912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1160.250052] RSP: 002b:00007feb02b81188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1160.251783] RAX: ffffffffffffffda RBX: 00007feb0571ef60 RCX: 00007feb0560bb19 10:34:36 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) [ 1160.253396] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1160.255150] RBP: 00007feb02b811d0 R08: 0000000000000000 R09: 0000000000000000 [ 1160.256769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1160.258553] R13: 00007fff328f512f R14: 00007feb02b81300 R15: 0000000000022000 [ 1160.277715] FAULT_INJECTION: forcing a failure. [ 1160.277715] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.280352] CPU: 0 PID: 7871 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 1160.281893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1160.283796] Call Trace: [ 1160.284387] dump_stack+0x107/0x167 [ 1160.285213] should_fail.cold+0x5/0xa [ 1160.286078] should_failslab+0x5/0x20 [ 1160.286945] kmem_cache_alloc_bulk+0x4b/0x320 [ 1160.287979] io_submit_sqes+0x6fe6/0x8610 [ 1160.288938] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1160.290066] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1160.291165] ? find_held_lock+0x2c/0x110 [ 1160.292086] ? io_submit_sqes+0x8610/0x8610 [ 1160.293064] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1160.294148] ? wait_for_completion_io+0x270/0x270 [ 1160.295247] ? rcu_read_lock_any_held+0x75/0xa0 [ 1160.296296] ? vfs_write+0x354/0xb10 [ 1160.297137] ? fput_many+0x2f/0x1a0 [ 1160.297962] ? ksys_write+0x1a9/0x260 [ 1160.298831] ? __ia32_sys_read+0xb0/0xb0 [ 1160.299750] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1160.300935] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1160.302095] do_syscall_64+0x33/0x40 [ 1160.302943] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1160.304102] RIP: 0033:0x7f23efe1fb19 [ 1160.304942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1160.309110] RSP: 002b:00007f23ed395188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1160.310844] RAX: ffffffffffffffda RBX: 00007f23eff32f60 RCX: 00007f23efe1fb19 [ 1160.312464] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1160.314092] RBP: 00007f23ed3951d0 R08: 0000000000000000 R09: 0000000000000000 [ 1160.315709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1160.317318] R13: 00007ffe3b5337ff R14: 00007f23ed395300 R15: 0000000000022000 10:34:36 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x4007, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1d, 0x1}, 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rffno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',cache=mmap,cache=none,\x00']) 10:34:36 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x4000, 0x0, 0x0, 0x0) 10:34:36 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)={0x24, 0x42, 0x69844ea0a6ddcd11, 0x0, 0x0, {}, [@typed={0xd, 0x0, 0x0, 0x0, @str='[}\xef(.,)(\x00'}]}, 0x24}}, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="6c48b3fdfcc333e0c946ddda18fb1b500877a8a7871e2a5ed3a053ad431ff81ec156b27c5d86b58f792a68808d755c25171a0f9fe7eb44ed32272c30a24a20a0f57f744cbb54c1f8fdee1bb1ced148e5c259d150d3bc1dddfc703c5d8daf56a7c01028611a1576460ad74be32cc20e60ae0f29dce3f5ae8f5582", 0x7a}, {&(0x7f00000001c0)="26d1a16a31ed4d3e6aa9b6b84ce79b666c0ed0108c0dfff4314ba98bbfcb479b4d1bac2ed25ad8a6e2e513dd57bb19d92317e48a774638a538d363c5135664ee3ba284d0cf840325d2d74d8f5660a12ee345594c5cdbc5e67498ab865f3f11776edb263f5f0b6f6ed09975ac0003bac0870f074e02ccefdd6011ec42a6d52e55c5fbb3c2ffa33d5ffd5002c30e514141c80184412a7deed6d198b0a61d7a9de13b8defc6022e94bb57d3d8907c549ca0ea707b8b31c7cd511784f64d5053abc2f1ad1ddfc6a6af3d532cacd8243eb8836cc0395f48abe42ac61da437", 0xdc}], 0x2, &(0x7f00000002c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x30}, 0x20004000) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x4000) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) 10:34:36 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:34:36 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) 10:34:36 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) [ 1160.453593] FAULT_INJECTION: forcing a failure. [ 1160.453593] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.455511] CPU: 1 PID: 7887 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 1160.456373] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1160.457319] Call Trace: [ 1160.457626] dump_stack+0x107/0x167 [ 1160.458041] should_fail.cold+0x5/0xa [ 1160.458483] ? create_object.isra.0+0x3a/0xa20 [ 1160.459004] should_failslab+0x5/0x20 [ 1160.459437] kmem_cache_alloc+0x5b/0x310 [ 1160.459901] ? mark_held_locks+0x9e/0xe0 [ 1160.460365] create_object.isra.0+0x3a/0xa20 [ 1160.460866] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1160.461461] kmem_cache_alloc_bulk+0x168/0x320 [ 1160.461987] io_submit_sqes+0x6fe6/0x8610 [ 1160.462475] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1160.463041] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1160.463591] ? io_submit_sqes+0x8610/0x8610 [ 1160.464080] ? check_memory_region+0xe/0x1f0 [ 1160.464584] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1160.465130] ? wait_for_completion_io+0x270/0x270 [ 1160.465686] ? rcu_read_lock_any_held+0x75/0xa0 [ 1160.466219] ? vfs_write+0x354/0xb10 [ 1160.466645] ? fput_many+0x2f/0x1a0 [ 1160.467059] ? ksys_write+0x1a9/0x260 [ 1160.467491] ? __ia32_sys_read+0xb0/0xb0 [ 1160.467953] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1160.468550] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1160.469137] do_syscall_64+0x33/0x40 [ 1160.469560] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1160.470140] RIP: 0033:0x7f3619525b19 [ 1160.470569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1160.472655] RSP: 002b:00007f3616a9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1160.473521] RAX: ffffffffffffffda RBX: 00007f3619638f60 RCX: 00007f3619525b19 [ 1160.474339] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1160.475152] RBP: 00007f3616a9b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1160.475967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1160.476786] R13: 00007ffd470aa21f R14: 00007f3616a9b300 R15: 0000000000022000 [ 1160.529213] 9pnet: Insufficient options for proto=fd [ 1160.535060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7895 comm=syz-executor.7 [ 1160.545969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7896 comm=syz-executor.7 [ 1160.586713] FAULT_INJECTION: forcing a failure. [ 1160.586713] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.588112] CPU: 1 PID: 7902 Comm: syz-executor.6 Not tainted 5.10.236 #1 [ 1160.589059] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1160.590265] Call Trace: [ 1160.590680] dump_stack+0x107/0x167 10:34:37 executing program 4: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0x0, 0x4}, 0x80, 0x0}, 0x0, 0x200000d0, 0x1}, 0x0) syz_io_uring_setup(0x55db, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:34:37 executing program 7: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x2, 0x4) dup(r1) r2 = dup2(r0, r1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x7ffff000, 0x811) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000100)=0x28) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x4, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x0) openat(r4, &(0x7f0000000140)='./file0\x00', 0x400000, 0x61) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000008000000", @ANYRES32=r3, @ANYBLOB="04000000dd1900002e2f66696c653000"]) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) 10:34:37 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1160.591099] should_fail.cold+0x5/0xa [ 1160.591795] ? create_object.isra.0+0x3a/0xa20 [ 1160.592316] should_failslab+0x5/0x20 [ 1160.592752] kmem_cache_alloc+0x5b/0x310 [ 1160.593213] ? mark_held_locks+0x9e/0xe0 [ 1160.593679] create_object.isra.0+0x3a/0xa20 [ 1160.594187] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1160.594925] kmem_cache_alloc_bulk+0x168/0x320 [ 1160.595568] io_submit_sqes+0x6fe6/0x8610 [ 1160.596230] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1160.596847] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1160.597395] ? find_held_lock+0x2c/0x110 [ 1160.597864] ? io_submit_sqes+0x8610/0x8610 [ 1160.598373] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1160.598926] ? wait_for_completion_io+0x270/0x270 [ 1160.599483] ? rcu_read_lock_any_held+0x75/0xa0 [ 1160.600015] ? vfs_write+0x354/0xb10 [ 1160.600455] ? fput_many+0x2f/0x1a0 [ 1160.600997] ? ksys_write+0x1a9/0x260 [ 1160.601534] ? __ia32_sys_read+0xb0/0xb0 [ 1160.602154] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1160.602851] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1160.603439] do_syscall_64+0x33/0x40 [ 1160.603863] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1160.604448] RIP: 0033:0x7feb0560bb19 [ 1160.604871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1160.607161] RSP: 002b:00007feb02b81188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1160.608258] RAX: ffffffffffffffda RBX: 00007feb0571ef60 RCX: 00007feb0560bb19 [ 1160.609073] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1160.609884] RBP: 00007feb02b811d0 R08: 0000000000000000 R09: 0000000000000000 [ 1160.610707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1160.611519] R13: 00007fff328f512f R14: 00007feb02b81300 R15: 0000000000022000 [ 1160.621389] FAULT_INJECTION: forcing a failure. [ 1160.621389] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.622914] CPU: 1 PID: 7901 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 1160.623718] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1160.624685] Call Trace: [ 1160.624993] dump_stack+0x107/0x167 [ 1160.625408] should_fail.cold+0x5/0xa [ 1160.625842] ? create_object.isra.0+0x3a/0xa20 [ 1160.626370] should_failslab+0x5/0x20 [ 1160.626803] kmem_cache_alloc+0x5b/0x310 [ 1160.627262] ? mark_held_locks+0x9e/0xe0 [ 1160.627726] create_object.isra.0+0x3a/0xa20 [ 1160.628234] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1160.628817] kmem_cache_alloc_bulk+0x168/0x320 [ 1160.629341] io_submit_sqes+0x6fe6/0x8610 [ 1160.629830] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1160.630397] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1160.630949] ? find_held_lock+0x2c/0x110 [ 1160.631410] ? io_submit_sqes+0x8610/0x8610 [ 1160.631907] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1160.632452] ? wait_for_completion_io+0x270/0x270 [ 1160.633016] ? rcu_read_lock_any_held+0x75/0xa0 [ 1160.633546] ? vfs_write+0x354/0xb10 [ 1160.633975] ? fput_many+0x2f/0x1a0 [ 1160.634397] ? ksys_write+0x1a9/0x260 [ 1160.634827] ? __ia32_sys_read+0xb0/0xb0 [ 1160.635292] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1160.635884] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1160.636475] do_syscall_64+0x33/0x40 [ 1160.636899] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1160.637488] RIP: 0033:0x7f23efe1fb19 [ 1160.637911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1160.640014] RSP: 002b:00007f23ed395188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1160.640885] RAX: ffffffffffffffda RBX: 00007f23eff32f60 RCX: 00007f23efe1fb19 [ 1160.641697] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1160.642517] RBP: 00007f23ed3951d0 R08: 0000000000000000 R09: 0000000000000000 [ 1160.643329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1160.644143] R13: 00007ffe3b5337ff R14: 00007f23ed395300 R15: 0000000000022000 10:34:50 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) 10:34:50 executing program 7: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r0 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffb000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x6000) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x7000) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r2, &(0x7f0000ffb000/0x3000)=nil, 0x6000) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) r3 = shmat(r2, &(0x7f0000ffb000/0x3000)=nil, 0x6000) shmdt(r3) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff7000/0x4000)=nil) 10:34:50 executing program 4: pread64(0xffffffffffffffff, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f00000003c0)='.pending_reads\x00', 0x200400, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x4, 0xff, 0x9d, 0x9, 0x0, 0x5, 0x11, 0x9, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x91dd0d00a5f9d966, @perf_bp={&(0x7f0000000300), 0x1}, 0x41a04, 0x3, 0x99c, 0x9, 0x100000001, 0x7fffffff, 0x5e, 0x0, 0x8, 0x0, 0xa0}, 0xffffffffffffffff, 0xd, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048010}, 0x4000000) fcntl$getflags(r0, 0x401) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x108, 0x1d, 0xc21, 0x70bd26, 0x1, {0x4, 0x0, 0x2}, [@generic="5ef5bd7693e95bf6e80299abea12842b4d82fc055d05298cd3366e363bd1dfea40a6cc775c4007cbe09154c748550cd9b827b12a5cf2d114b0634ef6d205b14686d7886acc08b4225bdadf524119f4d164a8848cdfb409e7d19ed9d4a2a735e34d3ae7102e720944cc6dc8d03dd5095316802e4d83bf810790011fbc31f43e4245d9030e51293a25ca2bb91187c359c100b937802ecb60fbb14abac098982cb98f60fd8ff769fa612a1ba4c0a20f394b543311551f8f29a6c4b6460ae4e1b2274c2fd9311021d5b9317d5e5707c1690d502471066a4d1b0b6321bb3f12d6ff5d5b3d6037d10f5c090a51a7e1b365786399"]}, 0x150}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) 10:34:50 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xeffd, 0x0, 0x0, 0x0) 10:34:50 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) 10:34:50 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) 10:34:50 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:34:50 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r1, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc040}, 0x4000004) sendmsg$nl_generic(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)={0x24, 0x42, 0x69844ea0a6ddcd11, 0x0, 0x0, {}, [@typed={0xd, 0x0, 0x0, 0x0, @str='[}\xef(.,)(\x00'}]}, 0x24}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {}, {r6, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002880)={0xfffffffffffffffb, [{r208, r27}, {0x0, r7}, {r215, r29}, {r48, r57}, {r24, r25}, {r79, r193}, {r321}, {r305, r44}, {r145, r33}, {r227, r204}, {r35, r51}, {r137, r116}, {r20, r119}, {r91, r174}, {0x0, r155}, {r199, r203}, {r277, r68}, {r105, r264}, {r210, r218}, {r5, r119}, {0x0, r269}, {r214, r121}, {r187, r90}, {r13, r81}, {r130, r43}, {r289, r282}, {r187, r44}, {r115, r212}, {r317, r150}, {r109, r53}, {r94, r108}, {r134, r213}, {r73, r234}, {r197, r14}, {r173, r63}, {r281, r264}, {r159, r175}, {r257, r142}, {r32, r284}, {r74, r99}, {r13}, {r130, r123}, {r253, r39}, {r47, r285}, {r222, r203}, {r67, r244}, {r40, r288}, {r239, r322}, {r59, r85}, {r303}, {r71, r221}, {r208, r292}, {r229, r307}, {r79, r184}, {r240, r243}, {r298, r167}, {r88, r221}, {r215, r138}, {r253, r112}, {r133, r155}, {r306, r72}, {r315, r58}, {r40, r92}, {0x0, r286}, {r220, r57}, {r271, r196}, {r50, r236}, {r224, r36}, {0x0, r198}, {r13, r139}, {r122, r152}, {r83, r46}, {r253, r25}, {r134, r78}, {r16, r188}, {r267, r200}, {r125, r272}, {0x0, r80}, {0x0, r286}, {r295, r278}, {r149, r34}, {r300, r9}, {r173, r282}, {r245, r326}, {r11, r17}, {r261, r160}, {r189, r246}, {r103, r9}, {}, {r187, r162}, {r28, r207}, {0x0, r193}, {r56, r280}, {r245, r228}, {r261, r7}, {r141}, {r180}, {r42, r30}, {r147, r170}, {r110, r216}, {r197, r167}, {r240, r193}, {0x0, r30}, {r302, r209}, {r77, r254}, {r133, r172}, {r31, r262}, {r302}, {0x0, r244}, {r291, r216}, {r268, r81}, {r103, r116}, {r259, r29}, {r237, r163}, {r8, r70}, {r267, r127}, {r19}, {0x0, r324}, {r154, r255}, {r315, r316}, {r125, r319}, {r252, r100}, {r259, r95}, {r111, r304}, {r151, r157}, {r98, r211}, {r161, r185}, {r12, r216}, {r289, r221}, {r113, r301}, {r258, r260}, {r253, r241}, {r279, r250}, {r84, r30}, {r73, r179}, {r91}, {r275, r97}, {r226, r144}, {0x0, r49}, {r205, r260}, {r242, r61}, {r283, r167}, {r182, r51}, {r42, r297}, {r219, r326}, {r59, r168}, {r134, r119}, {0x0, r124}, {r120, r123}, {r296, r230}, {r120, r204}, {r320, r194}, {r249, r213}, {r263, r135}, {r96, r232}, {r65, r148}, {r201}, {r171, r37}, {r5, r106}, {r293, r174}, {r137, r72}, {0x0, r178}, {r224}, {0x0, r102}, {r147, r68}, {r192, r9}, {r113, r270}, {r166, r299}, {}, {r217, r53}, {r323, r274}, {r22, r104}, {r128}, {r52, r195}, {r101, r106}, {r10, r313}, {r231, r30}, {0x0, r269}, {r164, r194}, {r45, r80}, {r171, r309}, {0x0, r272}, {r117, r129}, {r107, r183}, {0x0, r64}, {r166, r276}, {r235, r139}, {r15, r18}, {r253, r72}, {r287, r190}, {r24, r204}, {r145, r204}, {r76, r272}, {0x0, r213}, {r93, r90}, {r156, r176}, {r208, r75}, {0x0, r251}, {r222, r89}, {0x0, r241}, {r302, r284}, {r79, r184}, {r302, r172}, {0x0, r228}, {0x0, r266}, {r86, r312}, {r47, r146}, {r273, r250}, {r47, r23}, {r173, r294}, {r308, r23}, {r247, r194}, {r41, r266}, {r12, r124}, {r199, r251}, {r177, r266}, {r281, r69}, {r74, r114}, {r169, r318}, {r325}, {r20, r193}, {r233, r251}, {0x0, r70}, {r126, r243}, {r202, r54}, {r56, r82}, {r118, r87}, {r50, r178}, {r158, r21}, {r323, r299}, {r111, r248}, {r55, r223}, {r40, r260}, {r311, r132}, {r131, r251}, {r219, r207}, {r26, r90}, {r62, r191}, {r206, r140}, {r186, r100}, {r257, r165}, {r28, r299}, {r60, r53}, {r310, r153}, {r103, r99}, {r265, r290}, {r38, r270}, {r199, r238}, {r118, r225}, {r136, r198}, {r256, r314}, {}, {r296, r150}, {r143, r66}, {r10, r251}], 0x7, "2d0d8536f368f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r328}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000000880)={0x4, [{0x0, r181}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r327}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r329}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r328}], 0x0, "f3c98fe0a9bb9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000380)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001880)={r330, r331, "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", "bbe3f3b85ddfdf15f317e70df8cfc805f6ad6e49dd39e29f48af749f2cd21ad4f8de072f8f4c7d9f496fe958d57d8174158c36f23e26204ed9c4840eafe035e2d155ed9ec889a90ad70806af8a8d28d7d58217e5376c5005dec92f47ae485863e2d2e1c4f8303bf058f5aeae828305bb1f28daabb622b36d77ac7b05b4d6be3ba5eb511d0d02f4b12d12f3fc26280d5f2f38670f2effb8053c253ff5016ec50b7a928ecc4e4bb3d970c003613c177d708ff8337ac1a2263f505b8714af7f49e7aae024ca81ea098b0b0fc6c206aa0607154656c55045cd938f21be0b06ebc27cb8bbf78035d2626f159ef5be1d4af0b09d52e1d338af44fac8fa259aa675f810a10801d3bd79508c36b40c9b4cdfd8ef432bbd1a6e1b05ae026540b7bf7bfa1fb051da92f8e6908409fa0f63845c5e7d6adb7599fada7b2b618d62b2e8b6273d0e10abdd232d13f179bcbe5cdb8d5403c377b08397cda2ba21ddb494d78c5d16d5bcc44bb722eee541df778acfb2641591935764cdde4af59d5c8ed78a0e806d9ecbcae634b1db829fdcd2465afb7d4726a3c85ec5174e07a5be670616ad1e775d4f68ba2e2769e684597185ef651c41d3c3e9fb78628fc4e3ec7fe5ddf5ce7c2a60c8938e016c275d16348b4c89d68feec82a01d7808695152c983dba118a641292f1e9cfdd31c555fdd4c6e8de8981497d0ac796af6aafbb5c60181a23725077488e8bf03e5bc09e8fc630024e7416d7a228082ed02f5aeb708ab6a046fc51b018f6f5ec5c84541f1e4c49023b683fce148572d85538fa75608bff2ab5683b782808c2d228ff118bdfb8344075c02b98f1d46d84682c21388568e8a79f0d0fe6b72f0d6377e395d208eaad649f9154c34306a1859ac23694b67ea35cea875cf499c3e7b14b7d936486b464540c8396f9d5bd080c55ffb54623ea812690de4e9c144191e86e222510ab6ef2943f85f4fa75349f277f2d47afb4a120ce48c9ff14b487e22cb353e7b9929a0169e3b1eda4050b7eb5416ee3d3d81ce9610bc47b7b40e53804cc32b4a70829bf65c770b99c79a220e887e26eea94f3d534adea0413d74a59134a88da70bfbd9d2f98930149abc34f2e177eab1c26a376b04b351ff7fc6ca9f2375c3a6ab1329061a74d129806de473bb9f01376dd295234c4b820fbc694bb443bc44e996a1fa94a1b66068e5afb40721723c80cb1795faa398561349ac591e7d5f562d54520b4c7808e503ba4d19e296825e5fb13c0aa285ebf42a59ed6ff87151ecb31a3190200bb68f1386932bdc12c76df21c7399d1a7c4991a6a4b2e136204678720480c60e7b93a1c64c98d95e8a294302c43f457ef2555ab1bec0ecc215646e26263e70d3325d5a926c1954c076a9f04447692510ea504fb86eeb3f2f91c40ec0a51e76e5de52eb1f439fab5052d3d7720f0f406c843fcd080534d147516d67c85c1ae33b51efbec7fdd3c2bca20e6cc6efa49b92fd14be61123e52519a3edbc251b1f0ff86db24e721fe442a79cc716703eeeda1eb0c5fa489efad256d7f45114aa41231bd46019e068e2b6aaeeb7fabfa8339cdbc6cde4f1de6ec7fcdd8c257d3e17bad1f4f5d035da2f361162fe0d35ffcc1fbc4d13f683299befaadbd4503475cc2e6919d8e562b10ae54c010942cbda344b869f7e01a402c05e6c13e02bedafc7912daa8e2837a12374962417ffedaec27661b8a7a59f55afc504120fb4ced71a3e50f47189db7604686844cf825a5ca9b5b5a8f51f45653caa03e090d77f8abbe32938049257677f8942f470a31ab264506c32dee0061d487197278e383e101a47ff1783a433da55b5074991d1b697ce92b055004734fdfff760f8ac8fe61f00e7e43ebb8c36d91f494bf7e11b3de3b12fbc3025664cd5a03105d2d747a91c254b511a4a9d946a9d83507db6ada0520d9c01cc159d9e960a175f3895c3f6997b3d161beb689136d1403fd78f4e8fb4992c7e33e465a7007952abd519a9206f05d6848d66a454679d578eac133222d9990879eb19954ebe654ea190eaaff4b66ed601e6f853b15819e1c0a894bb33739a7b2973cdd7d480cf90c3fc417c41f8eb4a8f46cc61e2b93836576271c0e0c979a01a451ecb774b7e85ca4507e9c3ea7cb57c34cc8bb271315f7171d2bd5b095c63a7b2427eed857ad19dba7b90eb17235c09a65f33b983b331243b57aa8c3267f97d44c29f803296871b4e3c0445ada4f1c895fe3708ca4a0761f00ce0f688701f9ce93a427afadc18658cd3eb7d25420f14daf229a0378aa56e435a08389d12fd8f5dfadae0d18f129a36fa4c6f5e85c2aafda8956adac1c448460504be4042ab0e61f20c9c865beaf41d93a4699eb4819a207256858b4320ff72fb99d81f3914975a87bf335f49e42f730d37dc740ca4ecda050a0e3165103d599b9a4828433aacdfcbfa22101016cf4cce11e95b3e7c602f5403a1f3b6d103b209877c1e089797a33d4f8b8e98e3122bb2b646bcf7d2c9f32a818c7230ca96c397c3b3f8360344ea46608e72cfad63519db05d22aa7a1e25ea8a1000fa1105a5aa693fbd9d8504b14bfe995958b75333e02671a670c8fdeedeae15949afecbead08650ef536aaabdb5339c35744de802d78c7bb27b9947917b81b9fa742f0cd62ffe9dd175ae41e3cb0836f8b921ccec8b982852e5021502f22ea54696865c3c08b0e43de14617bb34dd835ad222cce4c5fb23cf2826d9c9fe28d5abdf97e2d538c1882ace70c1bf96cf2c25cc4903d6ca94a5fd5a9a3ee1e82c29c0d2aa61e610bd99da000e610267a3900858c458c31d8233c355694688486d20f3504fee4e9b4dc67277aca04484fb042b5662b62d5b29e671e49d250e4791b718d6179f355de59fdfb561cdd398793fe1b0d25b71738c7a22de47ea4d3df7b8a8648045f80cc133f79dd3fddbfdbf1adfa1be1d5721ec522b081cdbc1133ea7d19fa019c4f4d0effb569b0e1caa45e9841a5543d3c49470dda4cf9f674967b4dd84e5bfcab03295d826135b9a00590724cc01d988771b15b13d8f44a117749bea29dd5d248707ca805c5256d7a282614bdda1d498304e5e992fa9ec15e24da7cd523422c9c5cc7393deb500140c6923a1b43514c6b0a5f6da39d34bb3d936f6b6db2a9c5ddf0331b8fad9e829bcd90da8d37cd16c32800c2facab0c1997d27e61dc910a6dd7dbc2766e63cb4884d4e38cde546d71f304ec8af401dd22ab1a86575c45e5a1b733491f867be7bcbd7af1010d059a9c7d3a599c84a23bc2ed96ba9501fe2be71bcba4cd6d7b17b6376017d8bf23dd0409e61c62640df341efafa2d1b0a57016deadfa5ab29fc01910aecd30b4a1cbdc8b3b8dd7de109e289e36b81a4ea128db97888cb6d0e9b9e5c7c7ea747ae8474d8b1d55305234493614206a0145d1b773e1a6d8b3464230909fb0dde4a18d014d5b08be3b494a312575b8170c3a998ca52e913da1f3ca6791498e832c1b4a36fa56318eef2d26568ba5c65397c0b11b44b55e876c887bc706cc102fbfd8a80717e5f75616cb0fecda58622f943f3fb8ea1d16bdfd75b46640f72b3d40849985d058fbaafa9d483dc9716a70c324b12996438b2faafbb5c163e1d73042a0501cb0466d2093a9c55ddfd8e74bd3ab7eebbb4a0714599af5a4a3768daf03696ac139794f8f0a26b403501368537828ad727851d068941f1442884cf3db093466c2db40b51feef7e79e07aad7c7a35853d729b21b1b4349abf426a1ce2878ecaa22ac5801ab6afecb26e7ed80705f04b0e0541ebf04f314401046e52f000bbf6328d96033c1d0d0120353cf37826d84cb42061e3b0404d65766eb6b6f4c31617e6d51399f7ed2719331a108fe6c0811cb14e72cec09a50278b066e4bceb2f99aa49825fdb1fb4fbdd1cee8b57fa598d35cc9e2fb087a27911d79f5cb9adfd3603d7f9386bafed9751ca488eaef89f74a7634b9cdc8f89bf9d5c3a22951c24f83977ea4c3a55598e4779aaaae88e0b7d3cbdfbb378262b7d91ef1aa8d6902f508cdb1e3b5626b104971f4c85e4ef7ba463c899153bc5ed6df1fc982506f531cc961f757d3e6b5c95ec36fd92d34b274f2a188a0e89d4a66adf945b72abd8c4a8e2e044540bb7afe5857ed1cd5c632a6718814e680ccf08d616716e47f5592f72d1c4fa4a2b2179011791ffe697f0c0a13f79f7876a9e8470902b23f28c78470f4097dd419c12e225648ff51223799ae28a4a04d9c6565fcc2b78f978f372e6f069189004822c5bd94baec4974ebe30f1511e2b29288e55f72c6dac9f693cabd69e7317a6edfbd0fcba475d4773b5e896c2a8f68a761d93b80ef313d701cb03d9aba1b98d1bcbbca00628f200862cdce6038e3d48c3a6edd5455e35baca9866a37454a3f3099ee12b6a6c378cc87acf6f0976e834f9439c656ad81667b32574152a441184b0265325abbb6df2a5ca19e2e62c62f0ace96712675018c4d325eb776bda5ef73f2d8e6bc8af7d42ce7f743384ae3a4b686542a59a28e55f6c6fcc952851fa9de706f5bce96694d6ab6d81ccf55a16caa2bf308d439feee3b1913527740ababc9759867c1e97d5fbba2fc09ae66a49f85cef5c8e199b21c33aac56351526a2167521551af3136689f9427797e0bd275f198540abe98293f3974a7d942a3a8e6efb096e680a702ce411c6b16728949152aae2c2385395a2bc93a527570413e29609589f36e9b00c123319ecdeee92dea586b0ce35507d0dbeebb5c6772f85ee18587892bae223d99db524259c700274548abc1802f2f9c8f12ab5b0c336f2af43d4e6eaee2fb366b55042aa1b7875d0fe1439d5f081e5edf30ecac2536ad068ad55f667ae9c01fb0142ee931835679dd71d5aab105ae35853d2edc0011ea2e990721979e9c4e6aeca4ee814305dc1673653c474f7b9719babcbdd2a17ec7ac755260f552cb44132b22ee8e06f4ffe1944814db466006a1a71c48ec8b38b3ace55a00cd4d1fcfb588e3665137ec6639eaee58df76b9c616b5bd318c5596cdaf752708286584de9792be457fbad1e11b1f8fd8f79fe932e72b95c58d601ff05e63d758d1826b858b7d6262e97b1a108fda8ec5914caafe3290f852a1a45e78e9750d1e29a19e415044c6d2cb717955abf06a6ae6fcf189eb332ca510ac41f97a952406bb8c24a50413cb7034c737c2d8d2561789ef9e1339a6880642c55cd31f2fcb9d0d9ec1983e6742febb0c5d1a8193c5433cbbcfcd1ccc599b992076cd95aa7760e76057c926010ce924cc977f6d7d2d40e7ed4c1db5e61ffb2fd3e747f46176cb6fa10a317643175d5b010445f7b644e8d21cc7cdd0605d81a604c49aee548620fb98d158dace8e148c25d61b58626baf2b26f0ad25ac4fe02fa3bc0c0f175b5db4ad0d2213806c"}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x40080) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}, {0x6, 0x11, 0x5332}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xfff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x3}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000005) [ 1174.499770] FAULT_INJECTION: forcing a failure. [ 1174.499770] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.501273] CPU: 1 PID: 7926 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 1174.502115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1174.503145] Call Trace: [ 1174.503475] dump_stack+0x107/0x167 [ 1174.503922] should_fail.cold+0x5/0xa [ 1174.504385] ? create_object.isra.0+0x3a/0xa20 [ 1174.504944] should_failslab+0x5/0x20 [ 1174.505404] kmem_cache_alloc+0x5b/0x310 [ 1174.505898] ? mark_held_locks+0x9e/0xe0 [ 1174.506406] create_object.isra.0+0x3a/0xa20 [ 1174.506954] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1174.507591] kmem_cache_alloc_bulk+0x168/0x320 [ 1174.507849] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1174.508163] io_submit_sqes+0x6fe6/0x8610 [ 1174.508190] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1174.508200] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1174.508212] ? find_held_lock+0x2c/0x110 [ 1174.508226] ? io_submit_sqes+0x8610/0x8610 [ 1174.508241] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1174.508253] ? wait_for_completion_io+0x270/0x270 [ 1174.508265] ? rcu_read_lock_any_held+0x75/0xa0 [ 1174.508275] ? vfs_write+0x354/0xb10 [ 1174.508293] ? fput_many+0x2f/0x1a0 [ 1174.515485] ? ksys_write+0x1a9/0x260 [ 1174.515945] ? __ia32_sys_read+0xb0/0xb0 [ 1174.516437] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1174.517078] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1174.517704] do_syscall_64+0x33/0x40 [ 1174.518159] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1174.518782] RIP: 0033:0x7f3619525b19 [ 1174.519230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1174.521450] RSP: 002b:00007f3616a9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1174.522377] RAX: ffffffffffffffda RBX: 00007f3619638f60 RCX: 00007f3619525b19 [ 1174.523247] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1174.524137] RBP: 00007f3616a9b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1174.524994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1174.525001] R13: 00007ffd470aa21f R14: 00007f3616a9b300 R15: 0000000000022000 [ 1174.546765] FAULT_INJECTION: forcing a failure. [ 1174.546765] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.549600] CPU: 0 PID: 7930 Comm: syz-executor.6 Not tainted 5.10.236 #1 [ 1174.551171] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1174.553067] Call Trace: [ 1174.553678] dump_stack+0x107/0x167 [ 1174.554520] should_fail.cold+0x5/0xa [ 1174.555399] ? create_object.isra.0+0x3a/0xa20 [ 1174.556447] should_failslab+0x5/0x20 [ 1174.557313] kmem_cache_alloc+0x5b/0x310 [ 1174.558267] ? mark_held_locks+0x9e/0xe0 [ 1174.559208] create_object.isra.0+0x3a/0xa20 [ 1174.560193] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1174.561364] kmem_cache_alloc_bulk+0x168/0x320 [ 1174.562423] io_submit_sqes+0x6fe6/0x8610 [ 1174.563384] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1174.564515] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1174.565612] ? find_held_lock+0x2c/0x110 [ 1174.566563] ? io_submit_sqes+0x8610/0x8610 [ 1174.567541] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1174.568639] ? wait_for_completion_io+0x270/0x270 [ 1174.569744] ? rcu_read_lock_any_held+0x75/0xa0 [ 1174.570811] ? vfs_write+0x354/0xb10 [ 1174.571649] ? fput_many+0x2f/0x1a0 [ 1174.572469] ? ksys_write+0x1a9/0x260 [ 1174.573343] ? __ia32_sys_read+0xb0/0xb0 [ 1174.574280] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1174.575492] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1174.576702] do_syscall_64+0x33/0x40 [ 1174.577574] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1174.578783] RIP: 0033:0x7feb0560bb19 [ 1174.579642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1174.583922] RSP: 002b:00007feb02b81188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1174.585691] RAX: ffffffffffffffda RBX: 00007feb0571ef60 RCX: 00007feb0560bb19 [ 1174.587357] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1174.589010] RBP: 00007feb02b811d0 R08: 0000000000000000 R09: 0000000000000000 [ 1174.590678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1174.592334] R13: 00007fff328f512f R14: 00007feb02b81300 R15: 0000000000022000 10:34:51 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) [ 1174.612185] FAULT_INJECTION: forcing a failure. [ 1174.612185] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.614860] CPU: 0 PID: 7929 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 1174.616456] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1174.618542] Call Trace: [ 1174.619149] dump_stack+0x107/0x167 [ 1174.619988] should_fail.cold+0x5/0xa [ 1174.620863] ? create_object.isra.0+0x3a/0xa20 [ 1174.621916] should_failslab+0x5/0x20 [ 1174.622801] kmem_cache_alloc+0x5b/0x310 [ 1174.623744] create_object.isra.0+0x3a/0xa20 [ 1174.624754] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1174.625927] kmem_cache_alloc_bulk+0x168/0x320 [ 1174.626992] io_submit_sqes+0x6fe6/0x8610 [ 1174.627983] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1174.629143] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1174.630268] ? find_held_lock+0x2c/0x110 [ 1174.631220] ? io_submit_sqes+0x8610/0x8610 [ 1174.632223] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1174.633340] ? wait_for_completion_io+0x270/0x270 [ 1174.634428] ? rcu_read_lock_any_held+0x75/0xa0 [ 1174.635481] ? vfs_write+0x354/0xb10 [ 1174.636330] ? fput_many+0x2f/0x1a0 [ 1174.637155] ? ksys_write+0x1a9/0x260 [ 1174.638042] ? __ia32_sys_read+0xb0/0xb0 [ 1174.638983] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1174.640169] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1174.641339] do_syscall_64+0x33/0x40 [ 1174.642183] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1174.643355] RIP: 0033:0x7f23efe1fb19 [ 1174.644201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1174.648389] RSP: 002b:00007f23ed395188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1174.650093] RAX: ffffffffffffffda RBX: 00007f23eff32f60 RCX: 00007f23efe1fb19 [ 1174.651725] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1174.653333] RBP: 00007f23ed3951d0 R08: 0000000000000000 R09: 0000000000000000 [ 1174.654956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1174.656581] R13: 00007ffe3b5337ff R14: 00007f23ed395300 R15: 0000000000022000 [ 1174.679385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=7937 comm=syz-executor.5 [ 1174.688563] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1174.783184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=7947 comm=syz-executor.5 [ 1174.870428] FAULT_INJECTION: forcing a failure. [ 1174.870428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1174.873335] CPU: 0 PID: 7950 Comm: syz-executor.1 Not tainted 5.10.236 #1 [ 1174.874880] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1174.876766] Call Trace: [ 1174.877366] dump_stack+0x107/0x167 [ 1174.878185] should_fail.cold+0x5/0xa [ 1174.879064] _copy_from_user+0x2e/0x1b0 [ 1174.879968] kstrtouint_from_user+0xbd/0x220 [ 1174.880977] ? kstrtou8_from_user+0x210/0x210 [ 1174.882001] ? lock_acquire+0x197/0x470 [ 1174.882916] ? ksys_write+0x12d/0x260 [ 1174.883797] proc_fail_nth_write+0x78/0x220 [ 1174.884773] ? proc_task_getattr+0x1f0/0x1f0 [ 1174.885775] ? proc_task_getattr+0x1f0/0x1f0 [ 1174.886772] vfs_write+0x29a/0xb10 [ 1174.887587] ksys_write+0x12d/0x260 [ 1174.888406] ? __ia32_sys_read+0xb0/0xb0 [ 1174.889320] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1174.890514] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1174.891680] do_syscall_64+0x33/0x40 [ 1174.892527] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1174.893678] RIP: 0033:0x7f36194d85ff [ 1174.894528] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1174.898857] RSP: 002b:00007f3616a9b170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1174.900586] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f36194d85ff [ 1174.902206] RDX: 0000000000000001 RSI: 00007f3616a9b1e0 RDI: 0000000000000006 [ 1174.903838] RBP: 00007f3616a9b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1174.905457] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1174.907077] R13: 00007ffd470aa21f R14: 00007f3616a9b300 R15: 0000000000022000 10:35:04 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:35:04 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:35:04 executing program 5: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006c80)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000001500)=[{&(0x7f0000000080)=""/224, 0xe0}, {&(0x7f0000000180)=""/161, 0xa1}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/52, 0x34}, {&(0x7f0000001280)=""/97, 0x61}, {&(0x7f0000001300)=""/252, 0xfc}, {&(0x7f0000001400)=""/66, 0x42}, {&(0x7f0000001480)=""/66, 0x42}], 0x8, &(0x7f0000001580)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000001640), 0x6e, &(0x7f0000001b80)=[{&(0x7f00000016c0)=""/250, 0xfa}, {&(0x7f00000017c0)=""/115, 0x73}, {&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/180, 0xb4}, {&(0x7f0000001a00)=""/13, 0xd}, {&(0x7f0000001a40)=""/65, 0x41}, {&(0x7f0000001ac0)=""/156, 0x9c}], 0x7, &(0x7f0000001c00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000001d40), 0x6e, &(0x7f00000032c0)=[{&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/245, 0xf5}, {&(0x7f0000002ec0)=""/62, 0x3e}, {&(0x7f0000002f00)=""/194, 0xc2}, {&(0x7f0000003000)=""/165, 0xa5}, {&(0x7f00000030c0)=""/132, 0x84}, {&(0x7f0000003180)=""/146, 0x92}, {&(0x7f0000003240)=""/121, 0x79}], 0x8, &(0x7f0000003340)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}}, {{&(0x7f00000034c0)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003540)=""/32, 0x20}, {&(0x7f0000003580)=""/28, 0x1c}, {&(0x7f00000035c0)=""/140, 0x8c}], 0x3, &(0x7f00000036c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f00000037c0)=@abs, 0x6e, &(0x7f0000004cc0)=[{&(0x7f0000003840)=""/179, 0xb3}, {&(0x7f0000003900)=""/236, 0xec}, {&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/43, 0x2b}, {&(0x7f0000004a40)=""/59, 0x3b}, {&(0x7f0000004a80)=""/106, 0x6a}, {&(0x7f0000004b00)=""/241, 0xf1}, {&(0x7f0000004c00)=""/49, 0x31}, {&(0x7f0000004c40)=""/104, 0x68}], 0x9, &(0x7f0000004d80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150}}, {{&(0x7f0000004f00)=@abs, 0x6e, &(0x7f00000055c0)=[{&(0x7f0000004f80)=""/54, 0x36}, {&(0x7f0000004fc0)=""/109, 0x6d}, {&(0x7f0000005040)=""/181, 0xb5}, {&(0x7f0000005100)=""/66, 0x42}, {&(0x7f0000005180)=""/76, 0x4c}, {&(0x7f0000005200)=""/42, 0x2a}, {&(0x7f0000005240)=""/227, 0xe3}, {&(0x7f0000005340)=""/240, 0xf0}, {&(0x7f0000005440)=""/118, 0x76}, {&(0x7f00000054c0)=""/253, 0xfd}], 0xa}}, {{&(0x7f0000005680), 0x6e, &(0x7f0000005800)=[{&(0x7f0000005700)=""/167, 0xa7}, {&(0x7f00000057c0)=""/15, 0xf}], 0x2}}, {{&(0x7f0000005840), 0x6e, &(0x7f0000005900)=[{&(0x7f00000058c0)=""/35, 0x23}], 0x1}}, {{&(0x7f0000005940)=@abs, 0x6e, &(0x7f0000006bc0)=[{&(0x7f00000059c0)=""/245, 0xf5}, {&(0x7f0000005ac0)=""/4096, 0x1000}, {&(0x7f0000006ac0)=""/249, 0xf9}], 0x3, &(0x7f0000006c00)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}], 0x9, 0x20010001, &(0x7f0000006ec0)={0x0, 0x3938700}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x7ffff000, 0x811) sendmsg$nl_generic(r0, &(0x7f0000007200)={&(0x7f0000006f00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000071c0)={&(0x7f0000006f40)={0x250, 0x1f, 0x0, 0x70bd29, 0x25dfdbfc, {0x11}, [@typed={0xc, 0x3f, 0x0, 0x0, @u64=0x6f5}, @generic="a852de10e378cacbf75f15b840cc840a9570ee7d6b1d48fde300cb71269630da604f194da70852e5301e3b31c6d3ec21ed20dd694b2745751c6d0174f1d29228f61d0cc1b25ca7c5c4c7fb17d740a43c628f94ca80ae66c117ba5332d434b4f9c1069d915bb04106b375f8804d822064b7ce930e81f79826583c70e9bf0183ee81e313f7f9b8db5dad0f5909497aa1dd835fd5aa08d8af60d963ef957645", @nested={0x18d, 0x83, 0x0, 0x1, [@typed={0xc, 0x34, 0x0, 0x0, @u64=0x5a0000000000000}, @typed={0x8, 0x81, 0x0, 0x0, @u32=0x800}, @generic="c459ea7d8b8430b4f59b3ff687c7f6fad76e93d969473fdd26a1b499d10f8c053b734593e5cfabeee5e4044c3d676191ac2588fd8c47970861820ac495a3ceb1a5568659f2161aa2613301b05cc694ac0874e356ac8cfdaf9f0efa116768d6776465e01d0b808b7d694f19b278543c4f2efd551987ab2d22df2fa069e9bcd1fedbdf95c95706dc4aa7d98da6cfb94af5c3d0ea4f34a8730f6524833358168021a3e327ebb28e006dd4f51f9cb7d0", @generic="81c9cefea99fa86718b44ed84777f7e5977182e5596ffd775985dd59b6bd7deddef49b4a90e1381acb80e18041e14307c4f3ab0bc2ce0ebcf9ac13c4b8105299c829563420832ab5436d62639e70a343a08e0e4f21d3e129d570d04fdd64ec9e82", @generic="328eadc3ea73778eb11b22bcfaae0c27de3da13ba6967c4db670f7ff8cb1b04e28f19f6fdab742bb80c1c13bbc4dd4a4a9a02bc2fb45208f49d317863ec5fb05f96ee075aa0ddc58295c43fa81db0b79d89a3d39eaa8ce1268cdfaf51809", @typed={0x8, 0x86, 0x0, 0x0, @fd=r1}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x44040}, 0x800) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) 10:35:04 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000001140)={0x2, 0x0, 0x5, 0x0, 0xffffe}) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0x911802, 0x140) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x9}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) r6 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0) flistxattr(r6, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, &(0x7f0000000040)) dup3(r6, r3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) mq_timedsend(r6, &(0x7f0000001e00)="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", 0x1000, 0x5, &(0x7f0000000000)={0x0, 0x3938700}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000140)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x7f, "9656c75f04ba4d"}) lseek(r1, 0x0, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat(r2, 0x0, 0x0, 0x186) copy_file_range(r7, 0x0, r1, 0x0, 0x200f5ef, 0x0) 10:35:04 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) 10:35:04 executing program 4: creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0xa588c2, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x1) 10:35:04 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) 10:35:04 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xf5ff, 0x0, 0x0, 0x0) [ 1187.665268] FAULT_INJECTION: forcing a failure. [ 1187.665268] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.667814] CPU: 1 PID: 7967 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 1187.669281] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1187.671068] Call Trace: [ 1187.671622] dump_stack+0x107/0x167 [ 1187.672400] should_fail.cold+0x5/0xa [ 1187.673208] ? create_object.isra.0+0x3a/0xa20 [ 1187.674179] should_failslab+0x5/0x20 [ 1187.675001] kmem_cache_alloc+0x5b/0x310 [ 1187.675852] ? mark_held_locks+0x9e/0xe0 [ 1187.676705] create_object.isra.0+0x3a/0xa20 [ 1187.677638] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1187.678720] kmem_cache_alloc_bulk+0x168/0x320 [ 1187.679694] io_submit_sqes+0x6fe6/0x8610 [ 1187.680607] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1187.681669] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1187.682705] ? find_held_lock+0x2c/0x110 [ 1187.683559] ? io_submit_sqes+0x8610/0x8610 [ 1187.684466] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1187.685478] ? wait_for_completion_io+0x270/0x270 [ 1187.686485] ? rcu_read_lock_any_held+0x75/0xa0 [ 1187.687481] ? vfs_write+0x354/0xb10 [ 1187.688264] ? fput_many+0x2f/0x1a0 [ 1187.689067] ? ksys_write+0x1a9/0x260 [ 1187.690062] ? __ia32_sys_read+0xb0/0xb0 [ 1187.691182] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1187.692435] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1187.693789] do_syscall_64+0x33/0x40 [ 1187.694662] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1187.695968] RIP: 0033:0x7f23efe1fb19 [ 1187.697007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1187.701566] RSP: 002b:00007f23ed395188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1187.703490] RAX: ffffffffffffffda RBX: 00007f23eff32f60 RCX: 00007f23efe1fb19 [ 1187.705266] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1187.707007] RBP: 00007f23ed3951d0 R08: 0000000000000000 R09: 0000000000000000 [ 1187.708783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1187.710550] R13: 00007ffe3b5337ff R14: 00007f23ed395300 R15: 0000000000022000 [ 1187.749532] FAULT_INJECTION: forcing a failure. [ 1187.749532] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.752113] CPU: 1 PID: 7966 Comm: syz-executor.6 Not tainted 5.10.236 #1 [ 1187.753554] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1187.755353] Call Trace: [ 1187.755923] dump_stack+0x107/0x167 [ 1187.756710] should_fail.cold+0x5/0xa [ 1187.757520] ? create_object.isra.0+0x3a/0xa20 [ 1187.758680] should_failslab+0x5/0x20 [ 1187.759483] kmem_cache_alloc+0x5b/0x310 10:35:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000180)={0x20000018}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0xe1, 0x20, 0x1, 0x44, @dev={0xfe, 0x80, '\x00', 0x33}, @dev={0xfe, 0x80, '\x00', 0xd}, 0x80, 0x8, 0x1ff, 0x6}}) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x7ffff000, 0x811) flock(r1, 0x6) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="310325bd7000fddbdf25010000000900030073797a320000000009000300391179438f3073790b4fbd5e34d1bb0e1d2d57fe6ef077127a31ceca77678e242881ce71492a905bd2f889b2b80628340bae07d65eec99e24cc8c44aadc71b94cf8a12ae6ee40eaf175b541e5e6fa1783602cd884f0f9d224eb22f301186c4f631fe42a0f62981db2579ed5a112b4789035136d44f31f25eed5aadd7567a32cad9"], 0x38}, 0x1, 0x0, 0x0, 0x88004}, 0x4000081) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240001801400018008000100ac1414000800020000fafb000c0002800500010000000000000000008001018008000100ac14140008000200e00000010c0002800500010088000000"], 0x5c}}, 0x0) 10:35:04 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffdbd, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x3, 0x0, 0x0, 0x16d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xc) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x8000, 0x0) getdents64(r0, &(0x7f0000000880)=""/4096, 0x1000) [ 1187.760339] ? mark_held_locks+0x9e/0xe0 [ 1187.761418] create_object.isra.0+0x3a/0xa20 [ 1187.762343] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1187.763429] kmem_cache_alloc_bulk+0x168/0x320 [ 1187.764402] io_submit_sqes+0x6fe6/0x8610 [ 1187.765303] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1187.766364] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1187.767635] ? find_held_lock+0x2c/0x110 [ 1187.768540] ? io_submit_sqes+0x8610/0x8610 10:35:04 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfdef, 0x0, 0x0, 0x0) [ 1187.769461] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1187.770602] ? wait_for_completion_io+0x270/0x270 [ 1187.771638] ? rcu_read_lock_any_held+0x75/0xa0 [ 1187.772620] ? vfs_write+0x354/0xb10 [ 1187.773406] ? fput_many+0x2f/0x1a0 [ 1187.774186] ? ksys_write+0x1a9/0x260 [ 1187.775003] ? __ia32_sys_read+0xb0/0xb0 [ 1187.775871] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1187.776990] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1187.778080] do_syscall_64+0x33/0x40 [ 1187.778882] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1187.779959] RIP: 0033:0x7feb0560bb19 [ 1187.780749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1187.784643] RSP: 002b:00007feb02b81188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1187.786263] RAX: ffffffffffffffda RBX: 00007feb0571ef60 RCX: 00007feb0560bb19 [ 1187.787784] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1187.789272] RBP: 00007feb02b811d0 R08: 0000000000000000 R09: 0000000000000000 [ 1187.790796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1187.792316] R13: 00007fff328f512f R14: 00007feb02b81300 R15: 0000000000022000 10:35:04 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:35:04 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:35:04 executing program 7: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) r0 = perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000240)=[{r3, 0x19520}, {r4, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x5, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0x142}) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000540)={{{@in=@private, @in=@private}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f00000001c0)=0xe8) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x8, 0x3) sendfile(0xffffffffffffffff, r5, &(0x7f0000000140)=0x3fd, 0x1) lseek(r2, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstat(r2, 0x0) sendfile(r2, r6, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 10:35:04 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) 10:35:04 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) [ 1187.964555] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1188.129299] FAULT_INJECTION: forcing a failure. [ 1188.129299] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.131703] CPU: 1 PID: 8000 Comm: syz-executor.6 Not tainted 5.10.236 #1 [ 1188.133118] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1188.134837] Call Trace: [ 1188.135387] dump_stack+0x107/0x167 [ 1188.136138] should_fail.cold+0x5/0xa [ 1188.136920] ? create_object.isra.0+0x3a/0xa20 [ 1188.137862] should_failslab+0x5/0x20 [ 1188.138646] kmem_cache_alloc+0x5b/0x310 [ 1188.139476] ? mark_held_locks+0x9e/0xe0 [ 1188.140314] create_object.isra.0+0x3a/0xa20 [ 1188.141197] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1188.142231] kmem_cache_alloc_bulk+0x168/0x320 [ 1188.143185] io_submit_sqes+0x6fe6/0x8610 [ 1188.144055] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1188.145068] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1188.146045] ? find_held_lock+0x2c/0x110 [ 1188.146882] ? io_submit_sqes+0x8610/0x8610 [ 1188.147761] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1188.148740] ? wait_for_completion_io+0x270/0x270 [ 1188.149727] ? rcu_read_lock_any_held+0x75/0xa0 [ 1188.150678] ? vfs_write+0x354/0xb10 [ 1188.151437] ? fput_many+0x2f/0x1a0 [ 1188.152177] ? ksys_write+0x1a9/0x260 [ 1188.152948] ? __ia32_sys_read+0xb0/0xb0 [ 1188.153770] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1188.154842] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1188.155896] do_syscall_64+0x33/0x40 [ 1188.156650] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1188.157682] RIP: 0033:0x7feb0560bb19 [ 1188.158444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1188.162180] RSP: 002b:00007feb02b81188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1188.163724] RAX: ffffffffffffffda RBX: 00007feb0571ef60 RCX: 00007feb0560bb19 [ 1188.165180] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1188.166634] RBP: 00007feb02b811d0 R08: 0000000000000000 R09: 0000000000000000 [ 1188.168095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1188.169559] R13: 00007fff328f512f R14: 00007feb02b81300 R15: 0000000000022000 10:35:04 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:35:04 executing program 5: unshare(0x28020600) semget$private(0x0, 0x4, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)=[0x8, 0x1, 0x6, 0x7]) semop(0x0, &(0x7f00000001c0)=[{0x0, 0x0, 0x800}, {0x0, 0x0, 0x1000}], 0x2) unshare(0x48020200) [ 1188.251488] FAULT_INJECTION: forcing a failure. [ 1188.251488] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.254467] CPU: 0 PID: 8003 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 1188.256082] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1188.257975] Call Trace: [ 1188.258590] dump_stack+0x107/0x167 [ 1188.259415] should_fail.cold+0x5/0xa [ 1188.260273] ? create_object.isra.0+0x3a/0xa20 [ 1188.261305] should_failslab+0x5/0x20 [ 1188.262157] kmem_cache_alloc+0x5b/0x310 [ 1188.263093] create_object.isra.0+0x3a/0xa20 [ 1188.264079] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1188.265221] kmem_cache_alloc_bulk+0x168/0x320 [ 1188.266253] io_submit_sqes+0x6fe6/0x8610 [ 1188.267218] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1188.268337] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1188.269418] ? find_held_lock+0x2c/0x110 [ 1188.270333] ? io_submit_sqes+0x8610/0x8610 [ 1188.271318] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1188.272408] ? wait_for_completion_io+0x270/0x270 [ 1188.273502] ? rcu_read_lock_any_held+0x75/0xa0 [ 1188.274568] ? vfs_write+0x354/0xb10 [ 1188.275410] ? fput_many+0x2f/0x1a0 [ 1188.276230] ? ksys_write+0x1a9/0x260 [ 1188.277083] ? __ia32_sys_read+0xb0/0xb0 [ 1188.278004] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1188.279191] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1188.280354] do_syscall_64+0x33/0x40 [ 1188.281190] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1188.282352] RIP: 0033:0x7f23efe1fb19 [ 1188.283201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1188.287346] RSP: 002b:00007f23ed395188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1188.289066] RAX: ffffffffffffffda RBX: 00007f23eff32f60 RCX: 00007f23efe1fb19 [ 1188.290686] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1188.292291] RBP: 00007f23ed3951d0 R08: 0000000000000000 R09: 0000000000000000 [ 1188.293895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1188.295506] R13: 00007ffe3b5337ff R14: 00007f23ed395300 R15: 0000000000022000 10:35:04 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2201}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f00000010c0)=""/4088, 0xff8, 0x62) sync() 10:35:04 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfff5, 0x0, 0x0, 0x0) 10:35:04 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:35:04 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) 10:35:04 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xf5, 0x0, 0x0, 0x0) [ 1188.590824] FAULT_INJECTION: forcing a failure. [ 1188.590824] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.593143] CPU: 1 PID: 8017 Comm: syz-executor.6 Not tainted 5.10.236 #1 [ 1188.594265] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1188.595821] Call Trace: [ 1188.596340] dump_stack+0x107/0x167 [ 1188.597035] should_fail.cold+0x5/0xa [ 1188.597656] ? create_object.isra.0+0x3a/0xa20 [ 1188.598420] should_failslab+0x5/0x20 [ 1188.599157] kmem_cache_alloc+0x5b/0x310 [ 1188.599917] ? mark_held_locks+0x9e/0xe0 [ 1188.600682] create_object.isra.0+0x3a/0xa20 [ 1188.601398] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1188.602326] kmem_cache_alloc_bulk+0x168/0x320 [ 1188.603127] io_submit_sqes+0x6fe6/0x8610 [ 1188.603824] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1188.604619] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1188.605509] ? find_held_lock+0x2c/0x110 [ 1188.606258] ? io_submit_sqes+0x8610/0x8610 [ 1188.606961] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1188.607770] ? wait_for_completion_io+0x270/0x270 [ 1188.608585] ? rcu_read_lock_any_held+0x75/0xa0 [ 1188.609415] ? vfs_write+0x354/0xb10 [ 1188.610013] ? fput_many+0x2f/0x1a0 [ 1188.610712] ? ksys_write+0x1a9/0x260 [ 1188.611386] ? __ia32_sys_read+0xb0/0xb0 [ 1188.612151] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1188.613106] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1188.614103] do_syscall_64+0x33/0x40 [ 1188.614804] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1188.615624] RIP: 0033:0x7feb0560bb19 [ 1188.616284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1188.619505] RSP: 002b:00007feb02b81188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1188.620842] RAX: ffffffffffffffda RBX: 00007feb0571ef60 RCX: 00007feb0560bb19 [ 1188.622172] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1188.623468] RBP: 00007feb02b811d0 R08: 0000000000000000 R09: 0000000000000000 [ 1188.624618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1188.625742] R13: 00007fff328f512f R14: 00007feb02b81300 R15: 0000000000022000 10:35:05 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:35:05 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x200000, 0x0, 0x0, 0x0) 10:35:05 executing program 4: rt_sigaction(0x0, &(0x7f0000000340)={0x0, 0x118000003, 0x0}, 0x0, 0x8, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}, 0x8000}}, {{0xa, 0x4e21, 0x27, @local}}}, 0x108) pselect6(0x40, &(0x7f00000013c0)={0xc1b2, 0xfffffffffffffeff, 0xffffffffffffff38, 0x800009d, 0x5, 0x5, 0x8}, &(0x7f0000001400)={0x0, 0x9, 0x4ffb, 0x7, 0x0, 0x3f, 0x6}, &(0x7f0000001440)={0xe5, 0x38c00000, 0x0, 0x4, 0x1, 0x401, 0x81, 0x104c0cd1}, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={[0x7]}, 0x8}) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000380)={[0x7]}, 0x0, &(0x7f0000000440)={r2, r3+60000000}, 0x8) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) close_range(r4, r0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000400)='system_u:object_r:crond_initrc_exec_t:s0\x00', 0x29, 0x2) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r5, 0x0}]) io_setup(0x9, &(0x7f00000008c0)=0x0) io_getevents(r6, 0xffffffffffffffff, 0x0, 0x0, 0x0) io_pgetevents(r6, 0xf2, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)={&(0x7f0000000480)={[0x3ff]}, 0x8}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffff, 0x0, 0x1000}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x0, 0x24, 0x1, 0x3, 0x0, 0xfe2d, 0x0, 0x1d}}) unshare(0x48020200) 10:35:05 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 10:35:05 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:35:05 executing program 5: add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="2ace858f95", 0x5, 0xfffffffffffffffc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1074, &(0x7f0000000240)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) [ 1188.952797] FAULT_INJECTION: forcing a failure. [ 1188.952797] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.954936] CPU: 0 PID: 8033 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 1188.956125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1188.957566] Call Trace: [ 1188.958025] dump_stack+0x107/0x167 [ 1188.958682] should_fail.cold+0x5/0xa [ 1188.959348] ? create_object.isra.0+0x3a/0xa20 [ 1188.960147] should_failslab+0x5/0x20 [ 1188.960806] kmem_cache_alloc+0x5b/0x310 [ 1188.961529] create_object.isra.0+0x3a/0xa20 [ 1188.962283] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1188.963184] kmem_cache_alloc_bulk+0x168/0x320 [ 1188.963976] io_submit_sqes+0x6fe6/0x8610 [ 1188.964714] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1188.965587] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1188.966415] ? find_held_lock+0x2c/0x110 [ 1188.967116] ? io_submit_sqes+0x8610/0x8610 [ 1188.967859] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1188.968679] ? wait_for_completion_io+0x270/0x270 [ 1188.969502] ? rcu_read_lock_any_held+0x75/0xa0 [ 1188.970291] ? vfs_write+0x354/0xb10 [ 1188.970946] ? fput_many+0x2f/0x1a0 [ 1188.971579] ? ksys_write+0x1a9/0x260 [ 1188.972236] ? __ia32_sys_read+0xb0/0xb0 [ 1188.972943] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1188.973846] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1188.974733] do_syscall_64+0x33/0x40 [ 1188.975369] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1188.976265] RIP: 0033:0x7f23efe1fb19 [ 1188.976899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1188.980039] RSP: 002b:00007f23ed395188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1188.981337] RAX: ffffffffffffffda RBX: 00007f23eff32f60 RCX: 00007f23efe1fb19 [ 1188.982558] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1188.983762] RBP: 00007f23ed3951d0 R08: 0000000000000000 R09: 0000000000000000 [ 1188.984965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1188.986166] R13: 00007ffe3b5337ff R14: 00007f23ed395300 R15: 0000000000022000 10:35:20 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:35:20 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) 10:35:20 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 10:35:20 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x7ffff000, 0x811) dup2(r1, r0) 10:35:20 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) 10:35:20 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1e95, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) dup2(r0, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:35:20 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0xfffffffffffffdd1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) r2 = msgget$private(0x0, 0x0) getresgid(&(0x7f00000010c0), &(0x7f0000001100)=0x0, &(0x7f0000001140)) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000001200)={{0x0, 0xee01, r3, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f}) r4 = getuid() getresgid(&(0x7f00000010c0), &(0x7f0000001100)=0x0, &(0x7f0000001140)) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000180)={{0x2, 0xee01, r3, r4, r5, 0x100, 0x3}, 0x0, 0x0, 0x7, 0x5, 0x7f, 0x1, 0xff, 0x8001, 0x8, 0x3, 0x0, 0xffffffffffffffff}) lchown(&(0x7f0000000140)='./file0\x00', r1, r3) open(&(0x7f00000000c0)='./file0\x00', 0x2241, 0x28) llistxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 10:35:20 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x400000, 0x0, 0x0, 0x0) [ 1204.322255] FAULT_INJECTION: forcing a failure. [ 1204.322255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1204.323879] CPU: 1 PID: 8059 Comm: syz-executor.6 Not tainted 5.10.236 #1 [ 1204.324695] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1204.325692] Call Trace: [ 1204.326016] dump_stack+0x107/0x167 [ 1204.326456] should_fail.cold+0x5/0xa [ 1204.326930] _copy_from_user+0x2e/0x1b0 [ 1204.327408] kstrtouint_from_user+0xbd/0x220 [ 1204.327937] ? kstrtou8_from_user+0x210/0x210 [ 1204.328486] ? lock_acquire+0x197/0x470 [ 1204.328971] ? ksys_write+0x12d/0x260 [ 1204.329433] proc_fail_nth_write+0x78/0x220 [ 1204.329952] ? proc_task_getattr+0x1f0/0x1f0 [ 1204.330482] ? proc_task_getattr+0x1f0/0x1f0 [ 1204.331042] vfs_write+0x29a/0xb10 [ 1204.331468] ksys_write+0x12d/0x260 [ 1204.331906] ? __ia32_sys_read+0xb0/0xb0 [ 1204.332395] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1204.333023] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1204.333640] do_syscall_64+0x33/0x40 [ 1204.334087] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1204.334711] RIP: 0033:0x7feb055be5ff [ 1204.335155] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1204.337351] RSP: 002b:00007feb02b81170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1204.338262] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007feb055be5ff [ 1204.339111] RDX: 0000000000000001 RSI: 00007feb02b811e0 RDI: 0000000000000006 [ 1204.339964] RBP: 00007feb02b811d0 R08: 0000000000000000 R09: 0000000000000000 [ 1204.340817] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1204.341670] R13: 00007fff328f512f R14: 00007feb02b81300 R15: 0000000000022000 [ 1204.386704] FAULT_INJECTION: forcing a failure. [ 1204.386704] name failslab, interval 1, probability 0, space 0, times 0 [ 1204.389573] CPU: 0 PID: 8063 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 1204.391293] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1204.393200] Call Trace: [ 1204.393825] dump_stack+0x107/0x167 [ 1204.394667] should_fail.cold+0x5/0xa [ 1204.395539] ? create_object.isra.0+0x3a/0xa20 [ 1204.396610] should_failslab+0x5/0x20 [ 1204.397496] kmem_cache_alloc+0x5b/0x310 [ 1204.398422] ? mark_held_locks+0x9e/0xe0 [ 1204.399377] create_object.isra.0+0x3a/0xa20 [ 1204.400399] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1204.401615] kmem_cache_alloc_bulk+0x168/0x320 [ 1204.402662] io_submit_sqes+0x6fe6/0x8610 [ 1204.403647] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1204.404820] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1204.405922] ? find_held_lock+0x2c/0x110 [ 1204.406856] ? io_submit_sqes+0x8610/0x8610 [ 1204.407835] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1204.408970] ? wait_for_completion_io+0x270/0x270 [ 1204.410074] ? rcu_read_lock_any_held+0x75/0xa0 [ 1204.411143] ? vfs_write+0x354/0xb10 [ 1204.411998] ? fput_many+0x2f/0x1a0 [ 1204.412828] ? ksys_write+0x1a9/0x260 [ 1204.413705] ? __ia32_sys_read+0xb0/0xb0 [ 1204.414646] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1204.415858] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1204.417033] do_syscall_64+0x33/0x40 [ 1204.417886] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1204.419061] RIP: 0033:0x7f23efe1fb19 [ 1204.419909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1204.424121] RSP: 002b:00007f23ed395188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1204.425862] RAX: ffffffffffffffda RBX: 00007f23eff32f60 RCX: 00007f23efe1fb19 [ 1204.427534] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1204.429169] RBP: 00007f23ed3951d0 R08: 0000000000000000 R09: 0000000000000000 [ 1204.430841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1204.432506] R13: 00007ffe3b5337ff R14: 00007f23ed395300 R15: 0000000000022000 10:35:36 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) 10:35:36 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x4000, 0x0, 0x0, 0x0) 10:35:36 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_buf(r0, 0x1, 0x11, &(0x7f00000000c0)=""/244, &(0x7f00000001c0)=0xf4) r1 = syz_io_uring_setup(0x4be0, &(0x7f0000000000)={0x0, 0xffffffff, 0x10, 0x0, 0x184}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000200)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x4d4c, &(0x7f00000004c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r6 = syz_io_uring_setup(0x4d4c, &(0x7f00000004c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2004, @fd_index, 0x8, 0x9, 0x954, 0x0, 0x1, {0x1, r9}}, 0x80) r10 = signalfd4(r1, &(0x7f0000000400)={[0xfffffffffffffff8]}, 0x8, 0x80800) syz_io_uring_submit(r7, 0x0, &(0x7f0000000440)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0xa, 0x75a, {0x0, r6}, 0x3, 0xd, 0x1, {0x0, r9, r10}}, 0xffc00000) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r11, r8, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000300)={r12, r13+60000000}, 0x1, 0x0, 0x1, {0x0, r14}}, 0x2) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f0000000240)={0x0, 0x3938700}, 0x1, 0x1, 0x0, {0x0, r3}}, 0xfec7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x100010, 0xffffffffffffffff, 0x0) 10:35:36 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f00000000c0)='mqueue\x00', 0x0, 0x0) unlinkat(r0, &(0x7f00000005c0)='./file2\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x1) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r1, r2, 0x100) r3 = syz_io_uring_setup(0xf22, &(0x7f00000002c0)={0x0, 0xe920, 0x0, 0x3, 0x20a}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) lsetxattr$trusted_overlay_nlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540)={'L+', 0x10000}, 0x16, 0x2) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x847d, 0x0, 0x2, 0x269}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000580)='./file0/file1\x00', 0x1000) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r8) syz_io_uring_submit(r4, r7, &(0x7f0000000300)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2004, @fd_index, 0x8, 0x9, 0x954, 0x0, 0x1, {0x1, r8}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r8}}, 0x5) chown(&(0x7f0000000040)='./file0/file1\x00', 0xee01, r2) unlink(&(0x7f0000000140)='./file0/file1\x00') 10:35:36 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) 10:35:36 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8001, 0x12021, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x20, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, r2, 0x4, 0xffffffffffffffff, 0x1) r3 = fsmount(0xffffffffffffffff, 0x0, 0xfa) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000100)={@mcast1}, 0x14) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001000)=ANY=[@ANYBLOB="7f454c4607b4400702000000000000000100030008000000c0010000000000004000000000000000060000000000000005000000800138000100f9f4dd620d7e0600030002000000010000001f000000000000008a000000000000000000010000000000040000000000000004000000000000000400000000000000225116b6b0678736ebae33f953c3d4d349732a068b4636347c4ef8df7124b203a01e55b0b2686d12f41e2f2213c72c6f4dbc89a48cc2fef5f02b21602deb7292b183b92d5d3db3392ec98b8bcd1306a6b83818725596d84a0b9a741d0efcb7c86b9c7d66da0d4ae84fee86e2643dd031b2c0bce0845863f67747b1d8e38f99a6f7515fc681aa7cc168397626bff53dc5970f486a6fc5e39bf62ef6ac5355c945037f32c282e5c9fe238eb29e2a7fdfc6c1c01a5a60d8c0eeb4d140ce8ac78fee504c8e04699623e81ddddce5f9fbff94bd7543a5bba797530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000482956262e20b349b5ae7c715e283f6a1f823467c2670cb3070210361c12371e7c744ff582115ee96b3c22c0d956b9f9ce54da27aedc824ad46c90b730ea3c4fbe12aa0ff2db024202a2cf54339be437c026ae0ce300"/2487], 0x95e) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xc) r4 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x1000) kcmp(r2, r2, 0x1, r0, r4) bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) connect$unix(r5, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) r7 = dup(r6) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f00000005c0)=ANY=[@ANYBLOB="2bc4bed716d9044ef8c9ede08c05dc37a8e90037c27c76fca8abf64dd33e32ca978f5744eb4ea5bbbc1a8b0360b4401e65", @ANYRES32, @ANYBLOB="08000000096f421afe37aa4581653000cf73e29b590777e35bac05b7175307df71c3165c9c85f00c0f5f722c0ceeb2e2450cb076f0"]) read(0xffffffffffffffff, 0x0, 0x0) 10:35:36 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:35:36 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1219.827478] FAULT_INJECTION: forcing a failure. [ 1219.827478] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.830444] CPU: 0 PID: 8092 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 1219.832056] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1219.833965] Call Trace: [ 1219.834575] dump_stack+0x107/0x167 [ 1219.835441] should_fail.cold+0x5/0xa [ 1219.836314] ? create_object.isra.0+0x3a/0xa20 [ 1219.837354] should_failslab+0x5/0x20 [ 1219.838231] kmem_cache_alloc+0x5b/0x310 [ 1219.839180] ? mark_held_locks+0x9e/0xe0 [ 1219.840114] create_object.isra.0+0x3a/0xa20 [ 1219.841129] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1219.842288] kmem_cache_alloc_bulk+0x168/0x320 [ 1219.843355] io_submit_sqes+0x6fe6/0x8610 [ 1219.844332] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1219.845469] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1219.846583] ? find_held_lock+0x2c/0x110 [ 1219.847545] ? io_submit_sqes+0x8610/0x8610 [ 1219.848532] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1219.849637] ? wait_for_completion_io+0x270/0x270 [ 1219.850733] ? rcu_read_lock_any_held+0x75/0xa0 [ 1219.851810] ? vfs_write+0x354/0xb10 [ 1219.852672] ? fput_many+0x2f/0x1a0 [ 1219.853501] ? ksys_write+0x1a9/0x260 [ 1219.854385] ? __ia32_sys_read+0xb0/0xb0 [ 1219.855330] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1219.856507] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1219.857691] do_syscall_64+0x33/0x40 [ 1219.858534] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1219.859694] RIP: 0033:0x7f23efe1fb19 [ 1219.860542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1219.864776] RSP: 002b:00007f23ed395188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1219.866527] RAX: ffffffffffffffda RBX: 00007f23eff32f60 RCX: 00007f23efe1fb19 [ 1219.868159] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1219.869796] RBP: 00007f23ed3951d0 R08: 0000000000000000 R09: 0000000000000000 [ 1219.871468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1219.873133] R13: 00007ffe3b5337ff R14: 00007f23ed395300 R15: 0000000000022000 10:35:36 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xeffdffff, 0x0, 0x0, 0x0) 10:35:36 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r0, 0x8) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7002) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f00000004c0)={{}, "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"}) r1 = socket$inet(0x2, 0x2, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x20040, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000001780)={{0x2, 0x0, @remote}, {0x308}, 0xac1414fb, {0x2, 0x0, @broadcast}}) socket$inet(0x2, 0x800, 0x40) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x7, 0x1) fallocate(r1, 0x1d, 0xfffffffffffffffe, 0xb35c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000180)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000200)) 10:35:36 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:35:36 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000000c0)={0x7, &(0x7f0000000040)=[{0x6, 0x7}, {0x7f, 0x7}, {0xf800, 0x3ff}, {0xe6, 0x2}, {0x40}, {0x4, 0x5}, {0x0, 0x7fff}]}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb23}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r1, 0x0) mount$9p_unix(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x4, &(0x7f0000000400)={'trans=unix,', {[{@access_user}, {@version_u}], [{@appraise}]}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="880000000100000018000000", @ANYRES32=r1, @ANYBLOB='./file1\x00\x00\x00\x00\x00\x00\x00\x00\x00']) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000340), &(0x7f0000000240)=0x68) r3 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)={0x11}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) 10:35:36 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:35:36 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) 10:35:36 executing program 5: unshare(0x28020600) r0 = semget$private(0x0, 0x4, 0x100) unshare(0x4000000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00), 0x7ffff000, 0x811) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x7ffff000, 0x811) accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000140)=0x1c, 0x800) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRESDEC=r1, @ANYRES32=r0, @ANYRESHEX=r2]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000000)=""/35) unshare(0x48020200) 10:35:36 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xeffd, 0x0, 0x0, 0x0) [ 1220.229098] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1220.231579] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1220.233017] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1220.234390] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 1220.236170] print_req_error: 758 callbacks suppressed [ 1220.236188] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 0 [ 1220.241497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.242939] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1220.245441] Buffer I/O error on dev sr0, logical block 0, async page read [ 1220.247801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.249027] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1220.251209] Buffer I/O error on dev sr0, logical block 1, async page read [ 1220.253184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.254658] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1220.257097] Buffer I/O error on dev sr0, logical block 2, async page read [ 1220.259666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.260894] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1220.263033] Buffer I/O error on dev sr0, logical block 3, async page read [ 1220.265190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.266593] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1220.269039] Buffer I/O error on dev sr0, logical block 4, async page read [ 1220.271832] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.273130] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1220.275549] Buffer I/O error on dev sr0, logical block 5, async page read [ 1220.278505] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.279887] blk_update_request: I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1220.282015] Buffer I/O error on dev sr0, logical block 6, async page read [ 1220.283595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.284739] blk_update_request: I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1220.286888] Buffer I/O error on dev sr0, logical block 7, async page read [ 1220.289635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.291050] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1220.293661] Buffer I/O error on dev sr0, logical block 0, async page read [ 1220.296602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.297849] Buffer I/O error on dev sr0, logical block 1, async page read [ 1220.299589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.301080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.302801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.304991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.306632] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.308017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.309999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.311504] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.312903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.315289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.317339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.319381] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.321494] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.323478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.325498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.327268] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.329484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.331168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.336390] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.341103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.342584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.344063] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.346542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.348028] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.349424] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.351067] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.352813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.354958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.357385] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.362406] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.364032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.367021] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.368386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.369926] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.371336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.372729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.374100] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.375560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.376983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.378423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.381581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.383893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.386739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.388368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.390187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.392179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.395487] FAULT_INJECTION: forcing a failure. [ 1220.395487] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.398636] CPU: 1 PID: 8124 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 1220.400116] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1220.401860] Call Trace: [ 1220.402410] dump_stack+0x107/0x167 [ 1220.403203] should_fail.cold+0x5/0xa [ 1220.404014] ? create_object.isra.0+0x3a/0xa20 [ 1220.404978] should_failslab+0x5/0x20 [ 1220.405773] kmem_cache_alloc+0x5b/0x310 [ 1220.406626] ? mark_held_locks+0x9e/0xe0 [ 1220.407487] create_object.isra.0+0x3a/0xa20 [ 1220.408401] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1220.409462] kmem_cache_alloc_bulk+0x168/0x320 [ 1220.410428] io_submit_sqes+0x6fe6/0x8610 [ 1220.411333] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1220.412371] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1220.413380] ? find_held_lock+0x2c/0x110 [ 1220.414242] ? io_submit_sqes+0x8610/0x8610 [ 1220.415236] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1220.416505] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1220.417610] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1220.418745] ? trace_hardirqs_on+0x5b/0x180 [ 1220.419663] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1220.420811] ? __x64_sys_io_uring_enter+0xd/0x1b0 [ 1220.421823] ? __x64_sys_io_uring_enter+0x95/0x1b0 [ 1220.422864] do_syscall_64+0x33/0x40 [ 1220.423644] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1220.424729] RIP: 0033:0x7f23efe1fb19 [ 1220.425506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1220.429367] RSP: 002b:00007f23ed395188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1220.430978] RAX: ffffffffffffffda RBX: 00007f23eff32f60 RCX: 00007f23efe1fb19 [ 1220.431644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.432486] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1220.432498] RBP: 00007f23ed3951d0 R08: 0000000000000000 R09: 0000000000000000 [ 1220.432508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1220.432519] R13: 00007ffe3b5337ff R14: 00007f23ed395300 R15: 0000000000022000 [ 1220.439772] audit: type=1326 audit(1746268536.890:43): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8107 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc0087b19 code=0x7ffc0000 [ 1220.441249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.447307] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.449534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.451115] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.455716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.457370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.459037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.459494] audit: type=1326 audit(1746268536.909:44): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8107 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc0087b19 code=0x7ffc0000 [ 1220.461001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.467008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.469434] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.473199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.474779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.476418] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.478447] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.485156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.488441] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.492225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.496021] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.497408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.498927] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.501029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.502357] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.503745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.505134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.506555] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.508015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.510168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.511542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.512967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.515166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.516521] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.517879] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.519266] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.520820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.523610] audit: type=1326 audit(1746268536.939:45): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8107 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f1fc0087b19 code=0x7ffc0000 [ 1220.528497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.530294] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.531794] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.535321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.536743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.538119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.539474] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.540982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.547666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.549177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.550763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.552478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.554010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.555405] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.556763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.558249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.559644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.561051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.562386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.573321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.574995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.576513] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.578088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.579831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.581449] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.583126] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.586651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.588206] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.589817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.591500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.593052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.594904] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.596293] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.597948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.599558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.601170] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.602555] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.604068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.605745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.607225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.608660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.610259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.611958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.613675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.615246] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.617020] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.618454] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.620030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.623765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.627334] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.628747] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.630956] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.635540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.637091] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.638736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.640315] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.641945] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.643391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.644805] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.646446] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.648094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.649701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.651237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.652989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.654386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.655813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.657245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.658602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.660000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.661347] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.662703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.664492] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.667635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.680273] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.683262] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.687480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.700341] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.706309] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.708403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.709849] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.711817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.713220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.714970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.716463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.717924] audit: type=1326 audit(1746268536.939:46): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8107 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc0087b19 code=0x7ffc0000 [ 1220.718011] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.724123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.725530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.732612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.734282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.741921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.745271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.751398] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.753179] audit: type=1326 audit(1746268536.939:47): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8107 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc0087b19 code=0x7ffc0000 [ 1220.765596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.770699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.777399] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.779263] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.781190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.783103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.784758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.786381] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.788068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.788187] audit: type=1326 audit(1746268536.952:48): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8107 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1fc0087b19 code=0x7ffc0000 [ 1220.791373] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.796356] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.800552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.802576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.806304] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.808180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.812283] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.815366] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.819313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.826764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.828658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.830635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.832031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.833398] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.834781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.836893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.838254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.839667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.842129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.843830] audit: type=1326 audit(1746268536.952:49): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8107 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc0087b19 code=0x7ffc0000 [ 1220.844511] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.850444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.852303] audit: type=1326 audit(1746268536.952:50): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8107 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc0087b19 code=0x7ffc0000 [ 1220.852779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.864768] audit: type=1326 audit(1746268536.966:51): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8107 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1fc0087b19 code=0x7ffc0000 [ 1220.874069] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1220.875968] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1220.876428] audit: type=1326 audit(1746268536.966:52): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8107 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc0087b19 code=0x7ffc0000 [ 1220.877268] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1220.883263] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 01 00 00 01 00 [ 1220.885241] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.890169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.892276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.895062] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.896313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.898093] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.899534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.900711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.902134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.903572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.905493] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.907495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.909134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.910560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.912073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.913488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.915095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.917029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.918709] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.920132] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.921514] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.923267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.924491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.925700] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.927327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.929517] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.939795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.941490] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.943663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.946351] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.954323] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.956195] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.959477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.961401] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.962906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.964070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.965384] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.966566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.968519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.970269] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.971815] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.974898] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.976533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.981175] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.982773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.985385] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.988425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.990308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.992180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.993919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.995064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.996672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.997803] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1220.999023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.000122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.001976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.004334] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.005539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.006717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.007823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.008971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.010136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.011262] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.012391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.013765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.015358] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.017203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.018914] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.020545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.022192] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.023774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.025389] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.026772] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.028108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.029532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.030641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.031773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.032885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.033975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.035212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.036707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.038361] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.040179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.042169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.043760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.045321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.047179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.048731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.050147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.051603] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.052712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.054742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.056423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.057686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.059069] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.060264] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.061637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.064379] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.066551] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.068892] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.070425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.072151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.074392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.076166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.077561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.078659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.080040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.081353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.082391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.083442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.084499] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.085550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.086690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.087778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.088831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.089883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.090920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.091954] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.093010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.094039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.095138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.096631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.097683] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.098713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.099765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.100826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.101972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.103395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.105153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.106466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.107736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.109096] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.110203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.111287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.112499] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.114244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.115847] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.117782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.119580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.121406] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.123838] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.125588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.127398] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.129177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.130775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.132141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.133588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.134890] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.135980] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.137403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.139745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.141284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.145289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.147477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.149718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.152470] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.155294] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.158175] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.167946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.169762] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.173052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.174790] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.176321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.179556] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.181728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.183282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.186036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.187404] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.188759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.190435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.192371] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.193605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.194896] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.196314] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.199040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.201140] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.202761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.204038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.205827] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.207688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.209212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.210470] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.211904] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.213072] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.214347] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.216266] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.218026] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.219566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.220819] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.222179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.224073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.225683] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.227208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.228492] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.229688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.231487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.233364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.234869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.236053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.237451] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.239262] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.241277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.242688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.244098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.245437] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.246774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.248459] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.250361] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.251943] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.253130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.254700] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.256283] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.257466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.259614] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.262179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.263642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.265131] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.268191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.270445] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.272799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.274350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.275743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.277390] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.279356] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.280501] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.282305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.286151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.288651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.291292] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.295174] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.298757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.300225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.304774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.306141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.307265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.309370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.311093] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.312528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.313774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.316052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.317396] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.319358] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.321197] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.322541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.323560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.325016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.326730] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.327750] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.328945] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.330191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.331374] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.332484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.334012] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.335574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.337020] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.338482] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.339995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.341489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.342977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.344024] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.345388] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.346346] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.348150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.349108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.350230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.351220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.352219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.353189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.354056] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.354911] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.355723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.356601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.357446] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.358323] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.359176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.360098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.360951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.361764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.362631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.363489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.364352] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.365202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.366064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.366993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.367803] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.368678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.369522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.370381] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.371227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.372089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.372934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.373787] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.374658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.375525] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.376405] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.377250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.378278] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.379225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.380221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.381550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.383476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.385443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.387357] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.389257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.391188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.393215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.395203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.396819] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.397703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.398715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.399584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.400646] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.401504] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.402364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.403592] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.405650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.407759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.409558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.411392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.413296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.415234] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.417216] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.419232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.420790] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.421888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.423136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.423980] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.425036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.426124] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.426953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.427745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.429254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.431499] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.433476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.435435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.437319] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.439401] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.441321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.443328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.445412] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.447507] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.449475] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.451420] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.453390] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.458267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.460233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.462148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.463520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.464530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.465666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.466628] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.468037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.468822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.469778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.470751] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.471827] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.472651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.473642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.474492] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.475447] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.476455] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.477252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.478171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.481245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.483353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.485182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.486903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.488534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.490255] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.492220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.493920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.495445] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.496902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.498285] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.499697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.501145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.502493] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.503998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.504755] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.506208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.507498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.508296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.509419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.510375] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.511362] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.513270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.516258] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.518179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.519880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.521509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.523267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.524957] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.526583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.528191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.529591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.531015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.532424] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.533826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.535290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.537344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.539088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.541533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.542480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.543551] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.544364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.545350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.546189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.547331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.548536] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.549623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.550973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.552095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.553032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.553897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.554754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.555767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.556811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.557634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.559214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.560581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.561998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.563387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.564747] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.566723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.567640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.568516] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.570465] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.571550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.572426] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.573488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.574469] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.575347] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.576215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.576982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.577864] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.578752] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.579636] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.580521] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.581435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.582399] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.583164] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.584106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.585738] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.587222] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.588649] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.590051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.591512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.593372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.594342] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.595862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.596758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.598001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.599054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.600064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.600923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.602022] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.603040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.603986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.605023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.606006] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.607004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.608334] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.609117] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.610438] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.612159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.613571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.615037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.616434] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.617846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.619345] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.620771] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.622253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.623649] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.625050] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.626423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.627828] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.629270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.630661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.632077] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.633558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.634719] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.635505] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.636281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.637595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.638512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.639597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.640665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.641902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.643299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.644721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.646125] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.647565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.648989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.650399] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.651793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.653267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.654517] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.655388] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.656787] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.657983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.658737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.659721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.660620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.678650] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1221.679985] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1221.680758] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1221.681516] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 1221.682625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.684183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.685907] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.687553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.689230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.690919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.692557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.694240] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.695763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.697150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.698554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.699975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.701352] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.702759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.704144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.705523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.707059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.708538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.709951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.713020] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.714400] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.715792] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.717205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.718592] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.720109] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.722242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.724067] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.725832] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.727627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.729089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.731222] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.733440] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.734909] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.735712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.737577] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.739276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.741457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.743257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.747121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.750598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.753653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.755377] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.757136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.758902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.760355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.761782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.764354] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.766337] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.768243] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.770209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.772243] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.774233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.775843] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.777681] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.779652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.781748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.783395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.784472] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.785312] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.787611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.789362] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.791460] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.793456] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.795699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.797512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.801528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.803264] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.806411] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.808536] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.810077] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.813434] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.815585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.817601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.819608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.821243] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.822284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.823521] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.824450] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.827351] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.829249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.831533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.833629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.835331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.838290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.840226] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.843417] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.844769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.846285] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.847093] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.847764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.848830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.849552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.850618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.851524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.852420] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.856208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.857986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.859743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.861392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.863197] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.867401] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.870383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.875066] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.875993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.876823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.877953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.879212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.880044] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.880961] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.881768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.882573] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.883563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.884354] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.885248] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.886163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.887028] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.887829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.888553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.889469] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.890321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.891180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.892085] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.893022] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.893765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.894573] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.895431] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.896320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.897204] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.898084] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.899030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.899803] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.900614] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.901533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.902423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.903297] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.904623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.908211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.911337] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.914225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.920326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.924430] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.928669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.933419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.934933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.935612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.936947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.937643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.938819] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.939757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.940739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.941540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.942507] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.943369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.944237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.945069] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.945913] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.946723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.947535] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.948329] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.949254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.950113] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.950934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.951740] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.952556] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.953468] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.954239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.955128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.955957] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.956781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.957686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.958409] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.959221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.959989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.960748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.961563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.963518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.965290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.967231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.971516] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.976285] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.980327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.984312] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.988329] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.989758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.990939] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.991830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.993048] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.993770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.994702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.995600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.996381] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.998191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1221.999903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.001647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.003288] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.005185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.009345] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.011797] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.015376] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.016769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.017818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.019217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.020081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.021358] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.022209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.023219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.024085] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.026934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.028599] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.030259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.031630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.047511] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1222.048631] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1222.049410] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1222.050166] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 1222.051494] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.052365] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.053446] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.054974] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.056366] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.057763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.059642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.061362] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.062814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.064588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.065370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.067072] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.067818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.068725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.069499] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1222.070321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 10:35:50 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xf5ff, 0x0, 0x0, 0x0) 10:35:50 executing program 7: timer_create(0x1, &(0x7f0000000000)={0x0, 0x1b, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000480)={{r0, r1+10000000}, {0x0, 0x989680}}, 0x0) r2 = clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x7, &(0x7f0000000080)={0x0, 0x25, 0x1, @tid=r2}, &(0x7f00000000c0)=0x0) timer_delete(r3) 10:35:50 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xf5ffffff, 0x0, 0x0, 0x0) 10:35:50 executing program 5: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2e7766256506e3", @ANYRESHEX=r1, @ANYBLOB=',dfltuid=', @ANYRESHEX=0xee00, @ANYBLOB=',nodevmap,version=9p2000,access=client,nodevmap,version=9p2000.u,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5f757365723daaaaaaaaaa2c7375626a5f726f6c653d5c2c5e235b5e2c00"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000280)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x4, 0xda}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, {[@nop, @md5sig={0x13, 0x12, "c481afb4b5239c576ed53b2d20550e10"}, @exp_smc={0xfe, 0x6}, @eol, @mptcp=@mp_join={0x1e, 0x3, 0x7}, @window={0x3, 0x3, 0xcf}, @exp_fastopen={0xfe, 0x6, 0xf989, "f2d3"}, @eol, @eol]}}}}}}}, 0x0) clone3(&(0x7f0000000200)={0x44004100, 0x0, &(0x7f00000000c0), &(0x7f0000000100), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:35:50 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) 10:35:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8010, r0, 0x0) syz_io_uring_setup(0x4d4c, &(0x7f00000004c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x50, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x2007, @fd_index=0xa, 0xe0c, 0x1, 0x6, 0x1, 0x0, {0x2}}, 0x8) io_uring_enter(r0, 0xd0, 0x86ac, 0x0, &(0x7f00000000c0)={[0x3]}, 0x8) r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000100)=ANY=[@ANYBLOB="0100f3000800"/15, @ANYRES32=r4, @ANYBLOB="0000000000b300"/16]) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0x124, 0x36, 0x0, 0x70bd2d, 0x25dfdbfe, {0xb}, [@nested={0x110, 0x32, 0x0, 0x1, [@typed={0x8, 0x6d, 0x0, 0x0, @pid}, @generic, @generic="c474685e2613c049b372ae24a02d7cee571ded81a8c1406f5f40f82d3a7c65beddbcb3f8789e6344082cc1f0c655ec758df8c5f66eeed6f257cb224f917cc86e1e1c7a9496c165f5143efe858723805c094141bf0aebaeb0ddff008c8f0a02852b0abee62edabcf0f9446a32524d56e507255ab8b8f2a8d27673abdc45edbebb02d72ee75556abadfa3cec64b6715c5a35eb0fcb0f12356298a3015cd3eb7414e8392787e4263c0b32cc55d638dc8e5ef9c2c296c5351cc3e856c017acec1e7bd810d30eb36989ef", @typed={0x4, 0x1e}, @typed={0xc, 0x1b, 0x0, 0x0, @u64=0xa828}, @generic="a9a3da55af3d82a194aa689cd7197b4aab2a002cbd15a96698b561ae0e80cf3c1c15d4f322d372eefab01c04"]}]}, 0x124}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) 10:35:50 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xf5, 0x0, 0x0, 0x0) 10:35:50 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1234.428518] FAULT_INJECTION: forcing a failure. [ 1234.428518] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.431467] CPU: 0 PID: 8154 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 1234.433015] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1234.434887] Call Trace: [ 1234.435508] dump_stack+0x107/0x167 [ 1234.436329] should_fail.cold+0x5/0xa [ 1234.437194] should_failslab+0x5/0x20 [ 1234.438051] kmem_cache_alloc_bulk+0x4b/0x320 [ 1234.439074] io_submit_sqes+0x6fe6/0x8610 [ 1234.440036] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1234.441151] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1234.442225] ? find_held_lock+0x2c/0x110 [ 1234.443156] ? io_submit_sqes+0x8610/0x8610 [ 1234.444135] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1234.445223] ? wait_for_completion_io+0x270/0x270 [ 1234.446304] ? rcu_read_lock_any_held+0x75/0xa0 [ 1234.447352] ? vfs_write+0x354/0xb10 [ 1234.448178] ? fput_many+0x2f/0x1a0 [ 1234.449001] ? ksys_write+0x1a9/0x260 [ 1234.449852] ? __ia32_sys_read+0xb0/0xb0 [ 1234.450774] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1234.452085] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1234.453247] do_syscall_64+0x33/0x40 [ 1234.454078] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1234.455241] RIP: 0033:0x7f23efe1fb19 [ 1234.456081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1234.460238] RSP: 002b:00007f23ed395188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1234.461975] RAX: ffffffffffffffda RBX: 00007f23eff32f60 RCX: 00007f23efe1fb19 [ 1234.463598] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1234.465224] RBP: 00007f23ed3951d0 R08: 0000000000000000 R09: 0000000000000000 [ 1234.466839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1234.468457] R13: 00007ffe3b5337ff R14: 00007f23ed395300 R15: 0000000000022000 10:35:50 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfffffdef, 0x0, 0x0, 0x0) 10:35:50 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 10:35:51 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0x16252ac}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00), 0x7ffff000, 0x811) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'veth1_to_hsr\x00'}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0xff, 0x9, 0x80, 0x3}]}, 0x10) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000000c0601020000000000000000070000088900020073797a3100009b83ec0d7c8ae86fbb00000500010007000000af3c8090be45ec07eeb5b2fab887c32558deb479af23400fc3bdee939c97a5a3a05a1439b5d47f564271b6f67dfafd9f9f0bd17dd36462e716dc3f6d1a98fc918b731a06c99482a425b5049142494b"], 0x28}, 0x1, 0x0, 0x0, 0x240408c9}, 0x4000000) sendfile(r1, r0, 0x0, 0x10000007) [ 1234.625510] FAULT_INJECTION: forcing a failure. [ 1234.625510] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.627926] CPU: 1 PID: 8165 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 1234.629361] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1234.631122] Call Trace: [ 1234.631692] dump_stack+0x107/0x167 [ 1234.632476] should_fail.cold+0x5/0xa [ 1234.633288] should_failslab+0x5/0x20 [ 1234.634090] kmem_cache_alloc_bulk+0x4b/0x320 [ 1234.635045] io_submit_sqes+0x6fe6/0x8610 [ 1234.635951] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1234.636981] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1234.637981] ? find_held_lock+0x2c/0x110 [ 1234.638831] ? io_submit_sqes+0x8610/0x8610 [ 1234.639741] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1234.640737] ? wait_for_completion_io+0x270/0x270 [ 1234.641763] ? rcu_read_lock_any_held+0x75/0xa0 [ 1234.642732] ? vfs_write+0x354/0xb10 [ 1234.643513] ? fput_many+0x2f/0x1a0 [ 1234.644273] ? ksys_write+0x1a9/0x260 [ 1234.645058] ? __ia32_sys_read+0xb0/0xb0 [ 1234.645905] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1234.647005] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1234.648088] do_syscall_64+0x33/0x40 [ 1234.648860] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1234.649935] RIP: 0033:0x7f0f01994b19 [ 1234.650715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1234.654633] RSP: 002b:00007f0efef0a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1234.656262] RAX: ffffffffffffffda RBX: 00007f0f01aa7f60 RCX: 00007f0f01994b19 [ 1234.657773] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1234.659301] RBP: 00007f0efef0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1234.660843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1234.662346] R13: 00007ffe18ea049f R14: 00007f0efef0a300 R15: 0000000000022000 10:35:51 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 10:35:51 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfdef, 0x0, 0x0, 0x0) 10:35:51 executing program 7: ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f2, 0x10, 0x70bd2a, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000002c0)={{r1}, "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"}) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x26, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001900210c000000000000000002000000080000000000000008001e000300000008001600", @ANYRES32=0x0, @ANYBLOB="08d2b6b8e065d5dc4fbf8d86770d81edc55c64c1fa8e21bb2a2493b9c2c8126565bf459f5075a259efab4e77df8401a1e9ca127c941f6a5ca33f667258bef7175d306aee8f209560dfa251294ca6de6d2129c4e771abb05347120479d79a682c"], 0x2c}}, 0x0) r2 = signalfd4(r0, &(0x7f0000001380)={[0x9]}, 0x8, 0x800) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000014c0)={&(0x7f0000001400)={0x9c, 0x39, 0x300, 0x70bd25, 0x25dfdbfc, {0x1e}, [@generic="c6be5346ec660b715ee34a", @typed={0x8, 0x69, 0x0, 0x0, @uid=r3}, @nested={0x71, 0xf, 0x0, 0x1, [@generic="032dd607462c0d9041c759a9a49b944f987b43ee36c5068be9d3856f4a8da3f7d32492456746f758d2b15820c238457b5556ae924830d5c7990a393e904714cf468035e4a8f623b0ba304e483993f198864ee0d140b08d147abb282eac123f6071b81cbe17be962a7390af9448"]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4084}, 0x8094) fcntl$addseals(0xffffffffffffffff, 0x409, 0x4) sendmsg$nl_generic(r0, &(0x7f0000001340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000012c0)={0x64, 0x27, 0x800, 0x70bd25, 0x25dfdbfe, {0x1b}, [@nested={0x50, 0x10, 0x0, 0x1, [@typed={0x4b, 0x5d, 0x0, 0x0, @binary="87a843f4af714c488d3128404dc89205d3002070b6117be16e635f0a6b089a4104d78f9697e5bb84392a7ae898c707d95fd5f922b6400d4846eeb88eae2e3c8309208b5c072b3d"}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) 10:36:03 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 10:36:03 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0x16252ac}, {0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00), 0x7ffff000, 0x811) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'veth1_to_hsr\x00'}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0xff, 0x9, 0x80, 0x3}]}, 0x10) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000000c0601020000000000000000070000088900020073797a3100009b83ec0d7c8ae86fbb00000500010007000000af3c8090be45ec07eeb5b2fab887c32558deb479af23400fc3bdee939c97a5a3a05a1439b5d47f564271b6f67dfafd9f9f0bd17dd36462e716dc3f6d1a98fc918b731a06c99482a425b5049142494b"], 0x28}, 0x1, 0x0, 0x0, 0x240408c9}, 0x4000000) sendfile(r1, r0, 0x0, 0x10000007) 10:36:03 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfff5, 0x0, 0x0, 0x0) 10:36:03 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfffffff5, 0x0, 0x0, 0x0) 10:36:03 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 10:36:03 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x3, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3000000, r1) gettid() madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, r0) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, 0xffffffffffffffff) getpid() munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) 10:36:03 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000100)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r1 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x40, 0x26, 0x1, 0xe1, 0x0, 0x100000001, 0x20000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x12000, 0x663, 0x5, 0x9, 0x1ff, 0x8, 0xb4d6, 0x0, 0x5, 0x0, 0x4}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xe) pwrite64(r1, 0x0, 0x0, 0x0) 10:36:03 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x4000, 0x0, 0x0, 0x0) [ 1247.518372] FAULT_INJECTION: forcing a failure. [ 1247.518372] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1247.519944] CPU: 1 PID: 8206 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 1247.520800] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1247.521828] Call Trace: [ 1247.522160] dump_stack+0x107/0x167 [ 1247.522630] should_fail.cold+0x5/0xa [ 1247.523122] __alloc_pages_nodemask+0x182/0x600 [ 1247.523701] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1247.524460] alloc_pages_current+0x187/0x280 [ 1247.525016] allocate_slab+0x26f/0x380 [ 1247.525499] ___slab_alloc+0x470/0x700 [ 1247.525986] ? io_submit_sqes+0x6fe6/0x8610 [ 1247.526536] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 1247.527134] kmem_cache_alloc_bulk+0x1ec/0x320 [ 1247.527699] io_submit_sqes+0x6fe6/0x8610 [ 1247.528229] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1247.528851] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1247.529475] ? find_held_lock+0x2c/0x110 [ 1247.529982] ? io_submit_sqes+0x8610/0x8610 [ 1247.530521] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1247.531135] ? wait_for_completion_io+0x270/0x270 [ 1247.531742] ? rcu_read_lock_any_held+0x75/0xa0 [ 1247.532317] ? vfs_write+0x354/0xb10 [ 1247.532787] ? fput_many+0x2f/0x1a0 [ 1247.533241] ? ksys_write+0x1a9/0x260 [ 1247.533712] ? __ia32_sys_read+0xb0/0xb0 [ 1247.534219] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1247.534871] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1247.535524] do_syscall_64+0x33/0x40 [ 1247.535991] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1247.536639] RIP: 0033:0x7f0f01994b19 [ 1247.537097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1247.539384] RSP: 002b:00007f0efef0a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1247.540336] RAX: ffffffffffffffda RBX: 00007f0f01aa7f60 RCX: 00007f0f01994b19 [ 1247.541223] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1247.542124] RBP: 00007f0efef0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1247.543005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1247.543888] R13: 00007ffe18ea049f R14: 00007f0efef0a300 R15: 0000000000022000 [ 1247.569739] FAULT_INJECTION: forcing a failure. [ 1247.569739] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.572482] CPU: 0 PID: 8207 Comm: syz-executor.0 Not tainted 5.10.236 #1 [ 1247.574052] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1247.575940] Call Trace: [ 1247.576547] dump_stack+0x107/0x167 [ 1247.577370] should_fail.cold+0x5/0xa [ 1247.578229] ? create_object.isra.0+0x3a/0xa20 [ 1247.579271] should_failslab+0x5/0x20 [ 1247.580130] kmem_cache_alloc+0x5b/0x310 [ 1247.581045] ? mark_held_locks+0x9e/0xe0 [ 1247.581959] create_object.isra.0+0x3a/0xa20 [ 1247.582944] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1247.584098] kmem_cache_alloc_bulk+0x168/0x320 [ 1247.585136] io_submit_sqes+0x6fe6/0x8610 [ 1247.586099] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1247.587230] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1247.588315] ? find_held_lock+0x2c/0x110 [ 1247.589233] ? io_submit_sqes+0x8610/0x8610 [ 1247.590204] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1247.591299] ? wait_for_completion_io+0x270/0x270 [ 1247.592383] ? rcu_read_lock_any_held+0x75/0xa0 [ 1247.593426] ? vfs_write+0x354/0xb10 [ 1247.594263] ? fput_many+0x2f/0x1a0 [ 1247.595088] ? ksys_write+0x1a9/0x260 [ 1247.595958] ? __ia32_sys_read+0xb0/0xb0 [ 1247.596882] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1247.598065] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1247.599254] do_syscall_64+0x33/0x40 [ 1247.600086] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1247.601243] RIP: 0033:0x7f23efe1fb19 [ 1247.602082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1247.606250] RSP: 002b:00007f23ed395188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1247.607974] RAX: ffffffffffffffda RBX: 00007f23eff32f60 RCX: 00007f23efe1fb19 [ 1247.609593] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1247.611214] RBP: 00007f23ed3951d0 R08: 0000000000000000 R09: 0000000000000000 [ 1247.612845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1247.614470] R13: 00007ffe3b5337ff R14: 00007f23ed395300 R15: 0000000000022000 10:36:04 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 10:36:04 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xffffffff, 0x0, 0x0, 0x0) 10:36:04 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) 10:36:04 executing program 5: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001000000180000006aa46ad65766083bf128d86bae2e267be99e0a6b85e3abe5204c44fb103f7a75abe1424c9c0b357ee1c57bf2e65fd198e060dbc62e93154bd5c76d3073f207416dde35e441c2e22c4ed72d81b42cee4b956d016cae8eb46d26fd513e6ce96eb3b5f9fbedf363c250464ae058b961632688705aa32333d36a2b234e8ddb3b67730efacde9ae52ebb67164e10782cb71599770b916d093e6fe3841ae2ecb7b54be5844caf1e43288d4f156013d5974186d392c93349cacf97618897ae514b3e658ee895de1e7f1c891347eb46bda8c5f8678482381e85a0dddd177d059fe90ca88b8", @ANYRES32=0xffffffffffffffff, @ANYBLOB="06000000ff1b04002e2f09696c653000"]) r1 = accept4(0xffffffffffffffff, &(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x80, 0x80000) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x3f7, 0x1, 0x70bd27, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x3f7, 0x400, 0x70bd25, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x6f87, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x3}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000040)) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r2, 0x3491, 0x0, 0x0, 0x0, 0x0) 10:36:04 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c776664720c00ed4e07dacd046ed6354b61db59f588437285bec5165f0cf8a1accbfd72e0ae4b228426077f89198086d88136394a49c377353c8580e33d963098a093d02be6d5c860c726c80dd0208c4c550320abdc926ba5ea22cd91980cdb0816f967d862c18304555c14f179df63c16ff6a520477bca05006f46eab0fca9a9d4bc3bedba7130581141", @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.u,fsname=@&.^&,\x00']) 10:36:04 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xeffd, 0x0, 0x0, 0x0) 10:36:04 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xde8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x7ffff000, 0x811) pwrite64(r1, &(0x7f0000000480)="5d98e8ca6c388d1a25db88a72fec2e0528eb091a6a7278c831ee3b6d44245c607e915035a4207010e1443c679aca728e09e17363cc8e752259b38bdfdae5219d606c553bbeb2b6e08a429a7b838536d990fdd92eac71ce8af44af99b9fe578ba9139a04526ffa6a2c9aa554e22c1e264d122f78f1a2fabcd15c16640c2b5ca20c6cf65957df615a7415dc7a29ae26e2145d02f1c7bcbb1c78cd22abc1b8265441a3062a7e9710cda115e6857fea48ae2226d782f8c7ad3c127431b4b380d6918b4e226b5b2699f5e86d09dd8ed8bd38bbb51155e8d8af39ee4c104c34207ad29345d011292", 0xe5, 0xcd) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200210e000026000000000000000000"], 0x14}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000340)=""/270, 0x10e}], 0x1, 0x0, 0x2) r4 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb357b87ae67d5b00d5a28eea29113393d0e1c7391515c7ab7c00", 0x2d}, 0x48, 0xfffffffffffffffb) r5 = getegid() keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000300)=@keyring={'key_or_keyring:', r4}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x81, 0xff, 0x8, 0xfa, 0x0, 0xfff, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0x1}, 0x10, 0xffff, 0x400, 0x5, 0x40, 0xb4, 0x7, 0x0, 0xfffffbff, 0x0, 0x83}, 0x0, 0x1, r2, 0x1) keyctl$chown(0x4, r4, 0xee01, r5) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0x0) [ 1247.853810] FAULT_INJECTION: forcing a failure. [ 1247.853810] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.856777] CPU: 0 PID: 8231 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 1247.858386] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1247.860268] Call Trace: [ 1247.860869] dump_stack+0x107/0x167 [ 1247.861702] should_fail.cold+0x5/0xa [ 1247.862566] ? create_object.isra.0+0x3a/0xa20 [ 1247.863615] should_failslab+0x5/0x20 [ 1247.864474] kmem_cache_alloc+0x5b/0x310 [ 1247.865401] create_object.isra.0+0x3a/0xa20 [ 1247.866394] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1247.867568] kmem_cache_alloc_bulk+0x168/0x320 [ 1247.868603] io_submit_sqes+0x6fe6/0x8610 [ 1247.869564] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1247.870690] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1247.871792] ? find_held_lock+0x2c/0x110 [ 1247.872710] ? io_submit_sqes+0x8610/0x8610 [ 1247.873684] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1247.874768] ? wait_for_completion_io+0x270/0x270 [ 1247.875864] ? rcu_read_lock_any_held+0x75/0xa0 [ 1247.876917] ? vfs_write+0x354/0xb10 [ 1247.877748] ? fput_many+0x2f/0x1a0 [ 1247.878563] ? ksys_write+0x1a9/0x260 [ 1247.879433] ? __ia32_sys_read+0xb0/0xb0 [ 1247.880355] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1247.881533] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1247.882697] do_syscall_64+0x33/0x40 [ 1247.883569] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1247.884720] RIP: 0033:0x7f0f01994b19 [ 1247.885553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1247.889704] RSP: 002b:00007f0efef0a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1247.891424] RAX: ffffffffffffffda RBX: 00007f0f01aa7f60 RCX: 00007f0f01994b19 [ 1247.893031] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1247.894656] RBP: 00007f0efef0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1247.896275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1247.897880] R13: 00007ffe18ea049f R14: 00007f0efef0a300 R15: 0000000000022000 10:36:04 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x200000, 0x0, 0x0, 0x0) 10:36:04 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa4485060ee463218187b5b6c686ea9677aaaaaaaaaaaaaaaaaa0008084700001c000000ac1e0001ac1414bb07031a0703200000"], 0x0) 10:36:04 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5, 0x0, 0x0) [ 1248.038406] 9pnet: Insufficient options for proto=fd 10:36:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x13d080, 0x100) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000500)='{\x00') r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = dup(0xffffffffffffffff) pwrite64(r0, &(0x7f0000000240)="73bd0b40e209831af1bc57b3c2871296c8593f7ee92229de6372b835e7c181d8bafc4775f5ac8a9033fc4ec2f65658491594ad731c945d8ed9d829", 0x3b, 0x0) flock(r0, 0x1) r4 = openat(r2, &(0x7f00000001c0)='./file1/file0\x00', 0x4000, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000580)={{0x0, 0xfffffffffffffff8, 0x0, 0x7, 0x5, 0xe8, 0x6ea8, 0x26, 0x9, 0x5, 0x200, 0x3ff, 0x3, 0x400, 0x1000}}) sendmsg$inet6(r2, &(0x7f0000000440)={&(0x7f0000000380)={0xa, 0x4e20, 0x7a, @loopback}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000003c0)="f730a34868e62e8bb5ef3516276f2ff61375ebf3f67f0d63f1e8a7739bb72779fed508133fdb675818755f99f8f35b19", 0x30}], 0x1, &(0x7f00000017c0)=[@rthdr_2292={{0x98, 0x29, 0x39, {0x84, 0x10, 0x1, 0x9, 0x0, [@mcast1, @private1, @private0, @empty, @loopback, @private0, @empty, @empty]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x401}}, @dstopts_2292={{0xb0, 0x29, 0x4, {0x21, 0x12, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @generic={0x0, 0x46, "b0a423f302f56947043535a13da9ea177a807f1e1cef2ef1952aac920f9c8f29e33547d0c13903639ea9a839a7a5c5e15337318e51ec9097afa27dc610f8c47150952bfcbbd5"}, @calipso={0x7, 0x10, {0x2, 0x2, 0x2, 0xe4, [0x7]}}, @enc_lim={0x4, 0x1, 0x20}, @hao={0xc9, 0x10, @private1}, @calipso={0x7, 0x20, {0x0, 0x6, 0x4, 0x438, [0x9, 0x3, 0xbea]}}]}}}, @dstopts_2292={{0x40, 0x29, 0x4, {0x0, 0x4, '\x00', [@generic={0x3, 0xf, "6f832b65f06e8b2921209d987194a9"}, @hao={0xc9, 0x10, @private1}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7fffffff}}], 0x1b8}, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001580)={{r5, 0xffffffffffffffff, 0x79, 0x6, 0xffffffffffffffb6, 0xfffffffffffffffe, 0x0, 0xfff, 0x7fff, 0x0, 0xcfe, 0x2, 0x5, 0xfffffffffffeffff, 0x2aad7178}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="240000000104010800000000000000000000a329aba1010001004000000340000010004693558dff02e07b8aa2618b637487441964d1d6f1bc29f932b3f818d52138f9b20a48c758ed1d2d8a4be149eb0b0c003e95559d3a2d6e9ef61a7861233e798c4dc7289da8cb1ae9883a2a699ce250e88d7a92a8605ad74fa7f938e04d7f5aca8d9ddcd27cf94f7650cbd33f8bd5cbb38e7c613b7e60dd149a8b81ca81a5e8a24368914a97a4cbb9019a53a9bb5f8d377e0c955d982b3461a7848d50a08c416ade1430eafae44f0dfd238d536bd8765d7c027716b7812d3842d3fd63fc1df9c2347446197262c84b14782e6929498069c4001b7c20e36f84875110af1d9e004c182b8a59bd575f447765ccd1e0465949ae660686d277349e306b22eda0d152972b03c1e4d34d9fb4770cfcf1646fdbeed7e9b03a92bea2244f0a68fbb9fe73c9dabb7ceff2cf3c16b4e244166684df9d311efcd9640111056f74aafdea3f42942e7d40ae9a66d7f0d00663238320915cc1219030e5af535040"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) r7 = openat$cgroup_int(r4, &(0x7f0000000540)='cpuset.sched_load_balance\x00', 0x2, 0x0) lseek(r7, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000300)="cd47967d00193e6e0d670400000000000000a02eab62c925172d010800008f6f7c71c6a5ffcf912874fa81c1f675", 0x2e}], 0x1) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) [ 1248.283222] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 10:36:17 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:36:17 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) 10:36:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) unshare(0x0) 10:36:17 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x100000, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000200), 0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x1c) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) 10:36:17 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x400000, 0x0, 0x0, 0x0) 10:36:17 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r2, 0x0, 0x0, 0x1000002) ftruncate(0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r3, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000024000100ffff7d8dc47ce9e8a6450000"], 0x1c}}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r2, 0x0) 10:36:17 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xf5ff, 0x0, 0x0, 0x0) 10:36:17 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) [ 1260.904069] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1260.915742] FAULT_INJECTION: forcing a failure. [ 1260.915742] name failslab, interval 1, probability 0, space 0, times 0 [ 1260.918562] CPU: 0 PID: 8282 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 1260.920196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1260.922091] Call Trace: [ 1260.922700] dump_stack+0x107/0x167 [ 1260.923579] should_fail.cold+0x5/0xa [ 1260.924447] ? create_object.isra.0+0x3a/0xa20 [ 1260.925495] should_failslab+0x5/0x20 [ 1260.926364] kmem_cache_alloc+0x5b/0x310 [ 1260.927286] ? mark_held_locks+0x9e/0xe0 [ 1260.928236] create_object.isra.0+0x3a/0xa20 [ 1260.929227] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1260.930386] kmem_cache_alloc_bulk+0x168/0x320 [ 1260.931453] io_submit_sqes+0x6fe6/0x8610 [ 1260.932425] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1260.933577] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1260.934694] ? find_held_lock+0x2c/0x110 [ 1260.935650] ? io_submit_sqes+0x8610/0x8610 [ 1260.936642] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1260.937732] ? wait_for_completion_io+0x270/0x270 [ 1260.938837] ? rcu_read_lock_any_held+0x75/0xa0 [ 1260.939918] ? vfs_write+0x354/0xb10 [ 1260.940785] ? fput_many+0x2f/0x1a0 [ 1260.941627] ? ksys_write+0x1a9/0x260 [ 1260.942499] ? __ia32_sys_read+0xb0/0xb0 [ 1260.943451] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1260.944635] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1260.945842] do_syscall_64+0x33/0x40 [ 1260.946685] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1260.947860] RIP: 0033:0x7f0f01994b19 [ 1260.948718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1260.952957] RSP: 002b:00007f0efef0a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1260.954699] RAX: ffffffffffffffda RBX: 00007f0f01aa7f60 RCX: 00007f0f01994b19 [ 1260.956364] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1260.958014] RBP: 00007f0efef0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1260.959643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1260.961260] R13: 00007ffe18ea049f R14: 00007f0efef0a300 R15: 0000000000022000 10:36:17 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x40, 0x3c}}}, 0xb8}}, 0x0) r2 = pidfd_open(0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000400)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r2, 0x0, 0x800, 0x2}) r3 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_adj\x00') dup3(r4, r3, 0x0) syz_io_uring_setup(0x5606, &(0x7f0000000040)={0x0, 0xef33, 0x2, 0x3, 0x256}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000340)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) pipe2(&(0x7f00000014c0), 0xc000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x5, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x0, 0x1}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001480)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)="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", 0xc00, 0x40000002, 0x3}, 0x8) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="780200002700000427bd7000ffdbdf2506000000d012e199abd19c1b18aa0458b56b5fbcc2c12d6ef774f6e883eba470073349db5acaf58eb62a6a5931d34efbe19f070088b4e7f0f7a5ddf39987c8972af782d3baa8c2a3d8019fc24cceb7a82da574fb11153cab0417ebfa73715979d65d51b21b6dca43105fb84ab0e861a53aa339842389054ada4d0907a245aba98d42cf7e001f3610de472b1b97c518f9a43ccd3f75644d3fb2fb128adfbc9fd6ad6940ceb351599b700987f57d18400c12f31263b0a6a39f4549c21ed7e9ccdd6c15638b770d737d45827f78dbe7db080078000000000008003b00", @ANYRES32=0xee01, @ANYBLOB='\b\x00W\x00', @ANYRES32=r6, @ANYBLOB="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"], 0x278}, 0x1, 0x0, 0x0, 0x20040044}, 0x20008010) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0) 10:36:17 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfdef, 0x0, 0x0, 0x0) 10:36:17 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:36:17 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x4000, 0x0, 0x0) 10:36:17 executing program 7: io_submit(0x0, 0x2, &(0x7f0000001680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x3300, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x0, 0xfff, 0x0, 0x8, 0x400}, 0x0, 0x9, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @scatter={0x2, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/247, 0xf7}, {&(0x7f0000000140)=""/141, 0x8d}]}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x4, 0x0}) 10:36:17 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) 10:36:17 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfff5, 0x0, 0x0, 0x0) 10:36:17 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffd, 0x0, 0x0) 10:36:17 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xf5, 0x0, 0x0, 0x0) 10:36:30 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 10:36:30 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x40, 0x3c}}}, 0xb8}}, 0x0) r2 = pidfd_open(0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000400)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r2, 0x0, 0x800, 0x2}) r3 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_adj\x00') dup3(r4, r3, 0x0) syz_io_uring_setup(0x5606, &(0x7f0000000040)={0x0, 0xef33, 0x2, 0x3, 0x256}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000340)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) pipe2(&(0x7f00000014c0), 0xc000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x5, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x0, 0x1}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001480)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)="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", 0xc00, 0x40000002, 0x3}, 0x8) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="780200002700000427bd7000ffdbdf2506000000d012e199abd19c1b18aa0458b56b5fbcc2c12d6ef774f6e883eba470073349db5acaf58eb62a6a5931d34efbe19f070088b4e7f0f7a5ddf39987c8972af782d3baa8c2a3d8019fc24cceb7a82da574fb11153cab0417ebfa73715979d65d51b21b6dca43105fb84ab0e861a53aa339842389054ada4d0907a245aba98d42cf7e001f3610de472b1b97c518f9a43ccd3f75644d3fb2fb128adfbc9fd6ad6940ceb351599b700987f57d18400c12f31263b0a6a39f4549c21ed7e9ccdd6c15638b770d737d45827f78dbe7db080078000000000008003b00", @ANYRES32=0xee01, @ANYBLOB='\b\x00W\x00', @ANYRES32=r6, @ANYBLOB="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"], 0x278}, 0x1, 0x0, 0x0, 0x20040044}, 0x20008010) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0) 10:36:30 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 10:36:30 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xeffdffff, 0x0, 0x0, 0x0) 10:36:30 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="48010000100000010000000009000000ac14140000000000000000000002000000000000000000000000000000000000000077a1ce31c0eb81914e321ca9322cc49837d0e40cc400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}}, 0x0) 10:36:30 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x0, 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000580)=ANY=[@ANYBLOB="070071000000000000000000000000f977ebc97966e9cd7ff2dc090830af62363a92f7e725dcc33e670e33b84262b282cabce1ee77872b849dab110aaa43742ee457c826ae5c99f6ae0918d47739ca69883c08f1cfd73dad81aaf36b7ec86787ecd8bc711cb73734cb026002e02a7f21372c322bb2752e8582557264336240c19a8af9b232c11f256e41a4bc6211621215b9a362ef419fd892f435bb4497ccc73ceb87d5bef951bc874460d5b2ddaa2eeda39376cbd735fde0c53dbf9e23246915ed3616bcf35e4d5a231bd4e096f49cc3e446b3"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000500)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101982, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$LOOP_SET_STATUS(r1, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000440)={0x0, {}, 0x0, {}, 0x0, 0x12, 0x1d, 0x19, "6e60147ae2fcdc3f1d52584aebeafaa0edd69266edf29bbff612a7a730c97b72b322d0b8aff13a679593d52a3c987ef7c88e49e70f44c10f719a7c0f41774981", "f8258a6ec00c2423b3415e80f5dcc6b04bdfa5322086b2c40bc141347fe2216a", [0x100000001, 0x9]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x540, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0xfff, 0x0, 0x13, 0x0, "a33ffde15ac5e3597997ca8986bc6d30fb365a162412350d2dbb5f02e4b9158f3b699d557e93639a919a636fc399cb69327ad1688070049903904fc96628577b", "2f87934459fd43a9829984709a2e821126913d74f3d1ad8285ca2e3a4a403d99"}) creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000200)=ANY=[]) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) open(&(0x7f0000000080)='./file2\x00', 0x80, 0x26) acct(&(0x7f0000000140)='./file0\x00') dup(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x20082, 0xf4) acct(&(0x7f0000000380)='./file1\x00') perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:36:30 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ff, 0x0, 0x0) 10:36:30 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x200000, 0x0, 0x0, 0x0) [ 1274.272532] FAULT_INJECTION: forcing a failure. [ 1274.272532] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.274011] CPU: 1 PID: 8347 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 1274.274859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1274.275911] Call Trace: [ 1274.276243] dump_stack+0x107/0x167 [ 1274.276706] should_fail.cold+0x5/0xa [ 1274.277183] ? create_object.isra.0+0x3a/0xa20 [ 1274.277794] should_failslab+0x5/0x20 [ 1274.278407] kmem_cache_alloc+0x5b/0x310 [ 1274.278961] ? mark_held_locks+0x9e/0xe0 [ 1274.279678] create_object.isra.0+0x3a/0xa20 [ 1274.280347] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1274.280986] kmem_cache_alloc_bulk+0x168/0x320 [ 1274.281556] io_submit_sqes+0x6fe6/0x8610 [ 1274.282086] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1274.282710] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1274.283318] ? find_held_lock+0x2c/0x110 [ 1274.283831] ? io_submit_sqes+0x8610/0x8610 [ 1274.284376] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1274.285005] ? wait_for_completion_io+0x270/0x270 [ 1274.285609] ? rcu_read_lock_any_held+0x75/0xa0 [ 1274.286255] ? vfs_write+0x354/0xb10 [ 1274.286810] ? fput_many+0x2f/0x1a0 [ 1274.287266] ? ksys_write+0x1a9/0x260 [ 1274.287757] ? __ia32_sys_read+0xb0/0xb0 [ 1274.288273] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1274.289074] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1274.289946] do_syscall_64+0x33/0x40 [ 1274.290433] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1274.291072] RIP: 0033:0x7f0f01994b19 [ 1274.291545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1274.293845] RSP: 002b:00007f0efef0a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1274.294782] RAX: ffffffffffffffda RBX: 00007f0f01aa7f60 RCX: 00007f0f01994b19 [ 1274.295670] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1274.296549] RBP: 00007f0efef0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1274.297436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1274.298348] R13: 00007ffe18ea049f R14: 00007f0efef0a300 R15: 0000000000022000 10:36:30 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfdef, 0x0, 0x0) [ 1274.410297] Process accounting resumed [ 1274.471432] Process accounting resumed 10:36:30 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000001c0)={0x400}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x1010, r0, 0x75522000) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x9, 0x864, 0x5, 0x40, 0xf1c, 0x8}, {0xdf2, 0x0, 0xff, 0x7ff, 0x8001, 0x6}], ['\x00']}) 10:36:30 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 10:36:30 executing program 5: r0 = semget$private(0x0, 0x0, 0x0) unshare(0x4010480) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = semget(0x1, 0x2, 0x249) semop(r0, &(0x7f0000000300)=[{0x4, 0x4, 0x1000}, {0x3, 0xfe00}], 0x2) semctl$IPC_RMID(r2, 0x0, 0x0) unshare(0x6040000) r3 = semget(0x3, 0x2, 0x10) semtimedop(0xffffffffffffffff, &(0x7f0000000200)=[{0x1, 0x7ff, 0x1800}, {0x1, 0x8}, {0x1, 0x1f}, {0x2, 0x6}, {0x0, 0x0, 0x1000}, {0x2, 0x41, 0x800}, {0x0, 0x4, 0x1000}, {0x0, 0x7fff}, {0x3, 0x7}, {0x2, 0x5df6}], 0xa, &(0x7f0000000240)={0x0, 0x989680}) r4 = semget$private(0x0, 0x3, 0x80) semctl$GETPID(r4, 0x2, 0xb, &(0x7f0000000280)=""/114) semctl$GETVAL(r3, 0x1, 0xc, &(0x7f0000000100)=""/230) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000008000000010076de76c4e4f082c1048dcc22006b31f3c8f0cb3949f8e9ccfd62c5cd5a3d35294729dea673951fd9f47eef68869bd87eb9e32a2eb3d5e1feab708cb3c4ff274f3a3934ef8e4ccc48000000000000000000000000e6115bb993350bb78bd76d09943a8506556330920e289ebd791f58cb6d301175d357aaca229ddc16a3dedf3278cca3fb9a4a5b30a94b26716953ea1690d32a6c1ccc142d1fea419ad152cc509534d2e712ab0d1db97eeec30b1ea2b6443721d75f29957c5aab8f64426dd240345c47967a7730ba49c09e25d8"]) unshare(0x48020200) dup(r1) unshare(0x10080) 10:36:30 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xf5ffffff, 0x0, 0x0, 0x0) 10:36:30 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e21}, 0x6e) truncate(&(0x7f0000000080)='./file0\x00', 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 10:36:31 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x4000, 0x0, 0x0, 0x0) [ 1274.606826] FAULT_INJECTION: forcing a failure. [ 1274.606826] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.608571] CPU: 1 PID: 8373 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 1274.609353] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1274.610318] Call Trace: [ 1274.610646] dump_stack+0x107/0x167 [ 1274.611089] should_fail.cold+0x5/0xa [ 1274.611552] ? create_object.isra.0+0x3a/0xa20 [ 1274.612074] should_failslab+0x5/0x20 [ 1274.612509] kmem_cache_alloc+0x5b/0x310 [ 1274.612973] ? mark_held_locks+0x9e/0xe0 [ 1274.613435] create_object.isra.0+0x3a/0xa20 [ 1274.613935] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1274.614519] kmem_cache_alloc_bulk+0x168/0x320 [ 1274.615197] io_submit_sqes+0x6fe6/0x8610 [ 1274.615696] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1274.616283] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1274.617054] ? find_held_lock+0x2c/0x110 [ 1274.617633] ? io_submit_sqes+0x8610/0x8610 [ 1274.618128] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1274.618681] ? wait_for_completion_io+0x270/0x270 [ 1274.619236] ? rcu_read_lock_any_held+0x75/0xa0 [ 1274.619775] ? vfs_write+0x354/0xb10 [ 1274.620196] ? fput_many+0x2f/0x1a0 [ 1274.620613] ? ksys_write+0x1a9/0x260 [ 1274.621046] ? __ia32_sys_read+0xb0/0xb0 [ 1274.621512] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1274.622106] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1274.622694] do_syscall_64+0x33/0x40 [ 1274.623120] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1274.623770] RIP: 0033:0x7f0f01994b19 [ 1274.624305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1274.626715] RSP: 002b:00007f0efef0a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1274.627591] RAX: ffffffffffffffda RBX: 00007f0f01aa7f60 RCX: 00007f0f01994b19 [ 1274.628408] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1274.629217] RBP: 00007f0efef0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1274.630034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1274.630850] R13: 00007ffe18ea049f R14: 00007f0efef0a300 R15: 0000000000022000 [ 1274.641982] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 1024 (only 16 groups) [ 1274.678826] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 1024 (only 16 groups) 10:36:44 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x2, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x811) 10:36:44 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x400000, 0x0, 0x0, 0x0) 10:36:44 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e21}, 0x6e) truncate(&(0x7f0000000080)='./file0\x00', 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9, 0x0, 0x1}) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 10:36:44 executing program 5: r0 = semget$private(0x0, 0x0, 0x0) unshare(0x4010480) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = semget(0x1, 0x2, 0x249) semop(r0, &(0x7f0000000300)=[{0x4, 0x4, 0x1000}, {0x3, 0xfe00}], 0x2) semctl$IPC_RMID(r2, 0x0, 0x0) unshare(0x6040000) r3 = semget(0x3, 0x2, 0x10) semtimedop(0xffffffffffffffff, &(0x7f0000000200)=[{0x1, 0x7ff, 0x1800}, {0x1, 0x8}, {0x1, 0x1f}, {0x2, 0x6}, {0x0, 0x0, 0x1000}, {0x2, 0x41, 0x800}, {0x0, 0x4, 0x1000}, {0x0, 0x7fff}, {0x3, 0x7}, {0x2, 0x5df6}], 0xa, &(0x7f0000000240)={0x0, 0x989680}) r4 = semget$private(0x0, 0x3, 0x80) semctl$GETPID(r4, 0x2, 0xb, &(0x7f0000000280)=""/114) semctl$GETVAL(r3, 0x1, 0xc, &(0x7f0000000100)=""/230) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000008000000010076de76c4e4f082c1048dcc22006b31f3c8f0cb3949f8e9ccfd62c5cd5a3d35294729dea673951fd9f47eef68869bd87eb9e32a2eb3d5e1feab708cb3c4ff274f3a3934ef8e4ccc48000000000000000000000000e6115bb993350bb78bd76d09943a8506556330920e289ebd791f58cb6d301175d357aaca229ddc16a3dedf3278cca3fb9a4a5b30a94b26716953ea1690d32a6c1ccc142d1fea419ad152cc509534d2e712ab0d1db97eeec30b1ea2b6443721d75f29957c5aab8f64426dd240345c47967a7730ba49c09e25d8"]) unshare(0x48020200) dup(r1) unshare(0x10080) 10:36:44 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 10:36:44 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfffffdef, 0x0, 0x0, 0x0) 10:36:44 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xeffd, 0x0, 0x0, 0x0) 10:36:44 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfff5, 0x0, 0x0) [ 1287.883875] blktrace: Concurrent blktraces are not allowed on loop8 [ 1287.892674] FAULT_INJECTION: forcing a failure. [ 1287.892674] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.895802] CPU: 0 PID: 8406 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 1287.897423] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1287.899319] Call Trace: [ 1287.899944] dump_stack+0x107/0x167 [ 1287.900772] should_fail.cold+0x5/0xa [ 1287.901647] ? create_object.isra.0+0x3a/0xa20 [ 1287.902687] should_failslab+0x5/0x20 [ 1287.903559] kmem_cache_alloc+0x5b/0x310 [ 1287.904482] ? mark_held_locks+0x9e/0xe0 [ 1287.905404] create_object.isra.0+0x3a/0xa20 [ 1287.906400] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1287.907560] kmem_cache_alloc_bulk+0x168/0x320 [ 1287.908598] io_submit_sqes+0x6fe6/0x8610 [ 1287.909569] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1287.910694] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1287.911794] ? find_held_lock+0x2c/0x110 [ 1287.912724] ? io_submit_sqes+0x8610/0x8610 [ 1287.913719] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1287.914828] ? wait_for_completion_io+0x270/0x270 [ 1287.915926] ? rcu_read_lock_any_held+0x75/0xa0 [ 1287.916977] ? vfs_write+0x354/0xb10 [ 1287.917820] ? fput_many+0x2f/0x1a0 [ 1287.918645] ? ksys_write+0x1a9/0x260 [ 1287.919521] ? __ia32_sys_read+0xb0/0xb0 [ 1287.920449] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1287.921637] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1287.922803] do_syscall_64+0x33/0x40 [ 1287.923658] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1287.924815] RIP: 0033:0x7f0f01994b19 [ 1287.925651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1287.929839] RSP: 002b:00007f0efef0a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1287.931581] RAX: ffffffffffffffda RBX: 00007f0f01aa7f60 RCX: 00007f0f01994b19 [ 1287.933195] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1287.934795] RBP: 00007f0efef0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1287.936406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1287.938011] R13: 00007ffe18ea049f R14: 00007f0efef0a300 R15: 0000000000022000 10:36:44 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xf5ff, 0x0, 0x0, 0x0) 10:36:44 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./mnt\x00', 0x3, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./mnt\x00', 0x0, 0x0, 0x0, 0x2a1c8a1, &(0x7f0000000000)=ANY=[@ANYBLOB="6d6f64fbc451e130303030b03030303030303030303030303030302c00"]) 10:36:44 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) [ 1288.187210] hugetlbfs: Unknown parameter 'modûÄQá0000°000000000000000' [ 1288.198791] hugetlbfs: Unknown parameter 'modûÄQá0000°000000000000000' 10:36:57 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 10:36:57 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xeffdffff, 0x0, 0x0, 0x0) 10:36:57 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001980)=ANY=[@ANYBLOB="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"], 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x24, 0x1a, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x10, 0x0, 0x0, @ipv4=@multicast1}]}, 0x24}}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x200000, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472faeacf6f3d", @ANYRESHEX=r2, @ANYRES32, @ANYRESHEX, @ANYBLOB="2c64656275003d3030362c6d65ffffffffb07572"]) r3 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x205e8b, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000004c0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x1, 0x8) preadv2(r5, &(0x7f0000001680)=[{&(0x7f0000000240)=""/162, 0xa2}, {&(0x7f0000000300)=""/229, 0xe5}, {&(0x7f00000014c0)=""/162, 0xa2}, {&(0x7f0000000400)=""/4, 0x4}, {&(0x7f0000001580)=""/149, 0x95}, {&(0x7f0000001640)}], 0x6, 0x7, 0x401, 0x1e) openat$zero(0xffffffffffffff9c, &(0x7f0000001640), 0x434300, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f00000004c0)={{r3}, "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"}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x1e, 0xc21}, 0x14}}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001700)={0x51, 0x4, 0x1000, {0xfffd, 0x3ff}, {0x7ff, 0x1a}, @rumble={0x5, 0xfdd0}}) socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0cfe87a56bb95bb3ebcd20ec6a7de611e99d07137c9a4b0b8a1e08c39708bacd159e38a755b0389d5a2abd968619e92889c09a97f17f301486a43af08f1e76491e65e263c90e11cdcd5f85434790a9f9dbfe"]) 10:36:57 executing program 4: ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f00000001c0)) r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = open(0x0, 0x181040, 0x0) r2 = openat(r1, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x9) tee(r1, r2, 0x401, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(0x0, &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) sendfile(r3, r2, 0x0, 0x4000007ffffffc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) r6 = syz_io_uring_setup(0x4d4c, &(0x7f00000004c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) r10 = openat$procfs(0xffffffffffffff9c, 0xfffffffffffffffe, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r10, 0x80, &(0x7f00000002c0)=@nl=@kern={0x10, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0x1}, 0x80000000) sendfile(0xffffffffffffffff, r5, &(0x7f0000000280)=0x7, 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7, 0xfffffffa}}, './file0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, 0x0, 0x734, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x20}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9ed9}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20e}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x34f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}]]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 10:36:57 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfffffff5, 0x0, 0x0, 0x0) 10:36:57 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x200000, 0x0, 0x0) 10:36:57 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000040), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740)={0x0, 0x20000000, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:36:57 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfdef, 0x0, 0x0, 0x0) [ 1301.167436] FAULT_INJECTION: forcing a failure. [ 1301.167436] name failslab, interval 1, probability 0, space 0, times 0 [ 1301.168811] CPU: 1 PID: 8442 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 1301.169596] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1301.170577] Call Trace: [ 1301.170906] dump_stack+0x107/0x167 [ 1301.171343] should_fail.cold+0x5/0xa [ 1301.171809] ? create_object.isra.0+0x3a/0xa20 [ 1301.172336] should_failslab+0x5/0x20 [ 1301.172807] kmem_cache_alloc+0x5b/0x310 [ 1301.173278] ? mark_held_locks+0x9e/0xe0 [ 1301.173776] create_object.isra.0+0x3a/0xa20 [ 1301.174286] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1301.174877] kmem_cache_alloc_bulk+0x168/0x320 [ 1301.175417] io_submit_sqes+0x6fe6/0x8610 [ 1301.175923] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1301.176506] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1301.177066] ? find_held_lock+0x2c/0x110 [ 1301.177570] ? io_submit_sqes+0x8610/0x8610 [ 1301.178077] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1301.178637] ? wait_for_completion_io+0x270/0x270 [ 1301.179233] ? rcu_read_lock_any_held+0x75/0xa0 [ 1301.179776] ? vfs_write+0x354/0xb10 [ 1301.180232] ? fput_many+0x2f/0x1a0 [ 1301.180659] ? ksys_write+0x1a9/0x260 [ 1301.181101] ? __ia32_sys_read+0xb0/0xb0 [ 1301.181596] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1301.182199] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1301.182794] do_syscall_64+0x33/0x40 [ 1301.183251] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1301.183845] RIP: 0033:0x7f0f01994b19 [ 1301.184302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1301.186421] RSP: 002b:00007f0efef0a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1301.187347] RAX: ffffffffffffffda RBX: 00007f0f01aa7f60 RCX: 00007f0f01994b19 [ 1301.188185] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1301.189008] RBP: 00007f0efef0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1301.189875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1301.190697] R13: 00007ffe18ea049f R14: 00007f0efef0a300 R15: 0000000000022000 [ 1301.219270] loop7: detected capacity change from 0 to 16776704 [ 1301.232281] EXT4-fs (loop7): Unrecognized mount option " þ‡¥k¹[³ëÍ ìj}æé|šK Š×ºÍž8§U°8Z*½–†é(‰Àš—ñ0†¤:ðvIeâcÉÍÍ_…CG©ùÛþ" or missing value 10:36:57 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x400000, 0x0, 0x0) 10:36:57 executing program 5: r0 = open(&(0x7f00000004c0)='./file0\x00', 0x50000, 0x112) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0xa032}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x1, @loopback, 0xfffff000}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}, 0xc3a}, 0x1c) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000000), &(0x7f00000000c0)=0x4) fallocate(r1, 0x3, 0x52, 0x6) fstat(0xffffffffffffffff, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0xa, 0x3, 0xff) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@private0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400032}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x950) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) syz_open_dev$vcsa(&(0x7f0000000840), 0x0, 0x28180) creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000200)=@hci, &(0x7f0000000280)=0x80) 10:36:57 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xffffffff, 0x0, 0x0, 0x0) 10:36:57 executing program 4: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000080)={[{@check_strict}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) openat(r1, &(0x7f00000000c0)='\x00', 0x800, 0x194) openat(r0, &(0x7f0000000040)='./file0\x00', 0x40, 0x42) [ 1301.329714] loop7: detected capacity change from 0 to 16776704 [ 1301.355121] EXT4-fs (loop7): Unrecognized mount option " þ‡¥k¹[³ëÍ ìj}æé|šK Š×ºÍž8§U°8Z*½–†é(‰Àš—ñ0†¤:ðvIeâcÉÍÍ_…CG©ùÛþ" or missing value 10:36:57 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x16058, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 10:36:57 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xf5ffffff, 0x0, 0x0, 0x0) 10:36:57 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfff5, 0x0, 0x0, 0x0) 10:36:57 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) 10:37:10 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 10:37:10 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfffffdef, 0x0, 0x0, 0x0) 10:37:10 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = dup(r0) sendfile(r1, r2, &(0x7f0000000080)=0x10001, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322", 0x1a}, {0x0}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e", 0x73}], 0x4) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) openat$incfs(0xffffffffffffffff, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r0) fallocate(r4, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x4000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x2}) 10:37:10 executing program 5: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x8001}, 0x0, 0x0, 0x6, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) io_uring_enter(0xffffffffffffffff, 0x1e32, 0x302f, 0x0, &(0x7f0000000100)={[0x5]}, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001300)='./cgroup.net/syz1\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x4000) shmget(0x1, 0x3000, 0x1, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000002e00)=""/4110) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001340)=""/172) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/22) 10:37:10 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffdffff, 0x0, 0x0) 10:37:10 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5, 0x0, 0x0) 10:37:10 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x200000, 0x0, 0x0, 0x0) 10:37:10 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRESHEX, @ANYRESOCT]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x1d, 0x401, 0x101) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000012a8df6cd00000000804800"/36], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="95b50000018fd33a76f1d2328800000018000000", @ANYRES32=r0, @ANYBLOB="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"]) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) openat(r3, &(0x7f0000000400)='./file1\x00', 0x0, 0x114) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x129) r4 = socket$unix(0x1, 0x5, 0x0) dup(r4) read(r2, &(0x7f00000006c0)=""/135, 0x87) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x890176a15773a9a4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1000007, 0x0, 0x90}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) close_range(r1, r1, 0x2) dup3(r3, 0xffffffffffffffff, 0x80000) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1314.052888] FAULT_INJECTION: forcing a failure. [ 1314.052888] name failslab, interval 1, probability 0, space 0, times 0 [ 1314.054396] CPU: 1 PID: 8504 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 1314.055304] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1314.056418] Call Trace: [ 1314.056861] dump_stack+0x107/0x167 [ 1314.057448] should_fail.cold+0x5/0xa [ 1314.057954] ? create_object.isra.0+0x3a/0xa20 [ 1314.058584] should_failslab+0x5/0x20 [ 1314.059155] kmem_cache_alloc+0x5b/0x310 [ 1314.059795] ? mark_held_locks+0x9e/0xe0 [ 1314.060522] create_object.isra.0+0x3a/0xa20 [ 1314.061089] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1314.061754] kmem_cache_alloc_bulk+0x168/0x320 [ 1314.062342] io_submit_sqes+0x6fe6/0x8610 [ 1314.062901] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1314.063542] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1314.064175] ? find_held_lock+0x2c/0x110 [ 1314.064705] ? io_submit_sqes+0x8610/0x8610 [ 1314.065437] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1314.066067] ? wait_for_completion_io+0x270/0x270 [ 1314.066831] ? rcu_read_lock_any_held+0x75/0xa0 [ 1314.067526] ? vfs_write+0x354/0xb10 [ 1314.068138] ? fput_many+0x2f/0x1a0 [ 1314.068707] ? ksys_write+0x1a9/0x260 [ 1314.069195] ? __ia32_sys_read+0xb0/0xb0 [ 1314.069725] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1314.070409] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1314.071088] do_syscall_64+0x33/0x40 [ 1314.071572] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1314.072237] RIP: 0033:0x7f0f01994b19 [ 1314.072723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1314.075189] RSP: 002b:00007f0efef0a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1314.076182] RAX: ffffffffffffffda RBX: 00007f0f01aa7f60 RCX: 00007f0f01994b19 [ 1314.077259] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1314.078374] RBP: 00007f0efef0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1314.079298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1314.080225] R13: 00007ffe18ea049f R14: 00007f0efef0a300 R15: 0000000000022000 [ 1314.088238] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1314.133202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.134131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.135204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:37:10 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ffffff, 0x0, 0x0) 10:37:10 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) [ 1314.157521] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:37:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)={0x24, 0x42, 0x69844ea0a6ddcd11, 0x0, 0x0, {}, [@typed={0xd, 0x0, 0x0, 0x0, @str='[}\xef(.,)(\x00'}]}, 0x24}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@rand_addr, 0x0}, &(0x7f0000000100)=0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000140)={@ipv4, 0x0, r4}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1b8, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x1b8}}, 0x44000) clone3(&(0x7f0000000000)={0x18000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:37:10 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2000, 0x180, 0x5}, 0x18) sendmsg$inet6(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0xa, 0x4e20, 0xfece, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2a}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000180)="13e460802e47f1e4ab12f1b61202c99396b422b9f77029879c1499e39aac19c5ba6e234511fabb74bbad927c6091286f1029262f48af3d8ba5bbd3d23e0d26d77f800132d97dadf36b57a2e9f34d8026305c84f904cbd00c44707b212bfaaf941cf6cb78d1d1bef5262c759f139c9f15c958c26dfbb3568dd725641c31089113d04363b63bab60a50c4f9cafd3ff427cdfb45cf611de9b63561de837a825c4316086495f916fae43ad8e7266992fb89934c3ea", 0xb3}], 0x1, &(0x7f0000000280)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}, @flowinfo={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x400}}, @hopopts={{0x18, 0x29, 0x36, {0x33}}}, @dstopts={{0x70, 0x29, 0x37, {0x2b, 0xa, '\x00', [@jumbo={0xc2, 0x4, 0x200}, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @mcast1}, @pad1, @hao={0xc9, 0x10, @empty}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x3b, 0xa, 0x2, 0x7, 0x0, [@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @empty, @dev={0xfe, 0x80, '\x00', 0x1d}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x89, 0x6, 0x1, 0x0, 0x0, [@mcast2, @remote, @remote]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x11, 0x12, 0x0, 0x8, 0x0, [@mcast1, @dev={0xfe, 0x80, '\x00', 0x30}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @loopback, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}]}}}], 0x228}, 0x4000) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f27e5f", 0x44, 0x33, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x4}}}}}}}}}, 0x0) 10:37:10 executing program 7: listen(0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f00000001c0), 0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="fd00fc3bd04f3ded3be9f77798322e6c653000"]) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r2, 0x7fff) pread64(r1, &(0x7f00000000c0)=""/77, 0x4d, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x48, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}, @nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@remote}]}]}, 0x48}}, 0x0) 10:37:10 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x400000, 0x0, 0x0, 0x0) 10:37:10 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfffffff5, 0x0, 0x0, 0x0) [ 1314.306488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8526 comm=syz-executor.5 [ 1314.317280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8528 comm=syz-executor.5 10:37:10 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x4000, 0x0, 0x0) 10:37:10 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 10:37:10 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffdef, 0x0, 0x0) 10:37:10 executing program 4: ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000900)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="2321202e2f66696c65310ad09a41e2cc585a297b813de1ae4dd873c6bace22377dd5cf2b10ae01df5f5a5ce189b8ec6a88a477a9c736b079a6a1cf1aafa075637a89caa739d9ab69039d658f5dc21b190a3103cdb5a51cb492218a2602034660ad6a1a2429c1a53597cb7e0141e7ba4f267c0aed6db02f0a7b0cb55ae52527d0119398de6b3376c859528163a8893f169ae2e7492c04c144c9d659d47ab10dc8d1"], 0xb) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000300), 0x10080, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x10a00, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001e00)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x4d4c, &(0x7f00000004c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) openat(r0, &(0x7f0000000180)='./file1\x00', 0x200000, 0xc1d019857ecfb5d2) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, r5, &(0x7f00000002c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x2007, @fd_index=0x7, 0x5, 0x0, 0x0, 0x8}, 0xdcc) [ 1314.490553] debugfs: Directory '€˜§°ÇÛ ”uòQÇC !' with parent 'ieee80211' already present! 10:37:10 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x690801, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r0, 0x401054d6, 0x0) 10:37:10 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xffffffff, 0x0, 0x0, 0x0) [ 1314.556276] FAULT_INJECTION: forcing a failure. [ 1314.556276] name failslab, interval 1, probability 0, space 0, times 0 [ 1314.559193] CPU: 0 PID: 8546 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 1314.560840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1314.562739] Call Trace: [ 1314.563343] dump_stack+0x107/0x167 [ 1314.564185] should_fail.cold+0x5/0xa [ 1314.565050] ? io_setup_async_rw+0x180/0x580 [ 1314.566055] should_failslab+0x5/0x20 [ 1314.566918] __kmalloc+0x72/0x390 [ 1314.567719] io_setup_async_rw+0x180/0x580 [ 1314.568688] io_read+0xe98/0x11e0 [ 1314.569488] ? kiocb_done+0xc90/0xc90 [ 1314.570358] ? mark_lock+0xf5/0x2df0 [ 1314.571215] ? lock_chain_count+0x20/0x20 [ 1314.572179] ? stack_trace_consume_entry+0x160/0x160 [ 1314.573352] ? lock_acquire+0x197/0x470 [ 1314.574257] ? __lock_acquire+0xbb1/0x5b00 [ 1314.575219] io_issue_sqe+0x2e8a/0x77b0 [ 1314.576145] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1314.577332] ? lock_chain_count+0x20/0x20 [ 1314.578272] ? __is_insn_slot_addr+0x14c/0x290 [ 1314.579312] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1314.580513] ? io_connect+0x610/0x610 [ 1314.581382] ? lock_acquire+0x197/0x470 [ 1314.582298] ? find_held_lock+0x2c/0x110 [ 1314.583228] ? __fget_files+0x2cf/0x520 [ 1314.584140] ? lock_downgrade+0x6d0/0x6d0 [ 1314.585087] __io_queue_sqe+0x90/0x9d0 [ 1314.585976] ? io_issue_sqe+0x77b0/0x77b0 [ 1314.586925] ? __fget_files+0x2f8/0x520 [ 1314.587850] ? io_prep_rw+0x7f5/0x1050 [ 1314.588742] io_submit_sqes+0x44aa/0x8610 [ 1314.589709] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1314.590838] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1314.591949] ? find_held_lock+0x2c/0x110 [ 1314.592890] ? io_submit_sqes+0x8610/0x8610 [ 1314.593884] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1314.594981] ? wait_for_completion_io+0x270/0x270 [ 1314.596092] ? rcu_read_lock_any_held+0x75/0xa0 [ 1314.597146] ? vfs_write+0x354/0xb10 [ 1314.597991] ? fput_many+0x2f/0x1a0 [ 1314.598817] ? ksys_write+0x1a9/0x260 [ 1314.599687] ? __ia32_sys_read+0xb0/0xb0 [ 1314.600614] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1314.601802] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1314.602987] do_syscall_64+0x33/0x40 [ 1314.604034] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1314.605466] RIP: 0033:0x7f0f01994b19 [ 1314.606506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1314.611218] RSP: 002b:00007f0efef0a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1314.612969] RAX: ffffffffffffffda RBX: 00007f0f01aa7f60 RCX: 00007f0f01994b19 [ 1314.614593] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1314.616223] RBP: 00007f0efef0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1314.617863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1314.619489] R13: 00007ffe18ea049f R14: 00007f0efef0a300 R15: 0000000000022000 10:37:11 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffd, 0x0, 0x0) 10:37:30 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5, 0x0, 0x0) 10:37:30 executing program 7: listen(0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f00000001c0), 0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="fd00fc3bd04f3ded3be9f77798322e6c653000"]) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r2, 0x7fff) pread64(r1, &(0x7f00000000c0)=""/77, 0x4d, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x48, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}, @nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@remote}]}]}, 0x48}}, 0x0) 10:37:30 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 10:37:30 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffff5, 0x0, 0x0) 10:37:30 executing program 4: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x40086602, 0xfffffffffffffffd) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x200}, 0x400, 0x0, 0xfffffffd, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000240)=ANY=[@ANYBLOB="010019af308965d97ab6578659f00000010000211800ddff541175e002bc", @ANYRES32=r4, @ANYBLOB="04000000000000002e2f66696c653000"]) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="18010d38", @ANYRES16=0x0, @ANYBLOB="0b0c00000000000000003f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c005e8008000200030000001c005e800800020000000008080007003e040000080002000060000014005e8008000300ff070000080002000800000038005e80080007005f010000040001000800050021000000080006002f00000008000300020000000800060002000000080006000400000024005e80080005005e0000000800060002000000080009000800000008000300060000000c005e80080009008100000034005e800800030009000000080006007f0000000800030001000000080005003000000008000700e8040000080009000500000014005e8008000300000000000800070038010000"], 0x108}}, 0x800) lseek(r4, 0x0, 0x3) syz_open_dev$hiddev(&(0x7f00000001c0), 0x8, 0x40501) getsockopt$netlink(r3, 0x10e, 0xb, 0x0, &(0x7f0000001140)) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x100000001) 10:37:30 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) 10:37:30 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ff, 0x0, 0x0) 10:37:30 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000001240)='\x00', 0x1a10c0, 0x1a9) ioctl$FIBMAP(r0, 0x1, &(0x7f00000001c0)=0x5) r1 = syz_open_procfs(0x0, 0x0) lseek(r1, 0xfffffffffffffffa, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) syz_open_procfs(r2, &(0x7f0000000580)='pagemap\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) open(&(0x7f0000000400)='./file0\x00', 0x40, 0x3a) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d00210c00000000000000000aff0f000000000000000000140001"], 0x30}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r5, 0x3a, 0x1, 0x0, &(0x7f0000000080)=0x2000) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f00000005c0)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000200)="86881d18e0a4634dca41639461d6930fc5a1", 0x12, 0x400, &(0x7f0000000240)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000001800deff52a401000100000000002f2f3666bbedc3543df2ce5faa3b74a3", @ANYRES32, @ANYBLOB='\x00\x00\x00']) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f00000002c0)=ANY=[@ANYBLOB='gid', @ANYRESHEX=0x0, @ANYBLOB="2c73697a653d6b256d2d3474c82c6d6f64653d30303030303030303030303030303030303037373032332c6769643d", @ANYRESHEX=0xee00, @ANYBLOB="00040000ff9bd492c35891f93cc82c5208cc4494fe3e98f509c1c3338615e16a81d0bafbc05ac21892e21277a6142459205ead9b70f20dd2bec43edb079c8958f0b8b9313ab1ee5392654f9119f2c9089bc0b39b2a1e8479087932fd4ab56741ce18c3e6caaa5b5a4166c408e5885dd946eb5f9aa9728f5bd3f112c9bc2c12afd9f094101bfd61c9000000007a1f0252fcc51e984699bafd139660222456c09d034f6d0205e2a01b744bfb14cecda511aefc6352b7"]) [ 1334.217366] FAULT_INJECTION: forcing a failure. [ 1334.217366] name failslab, interval 1, probability 0, space 0, times 0 [ 1334.220197] CPU: 0 PID: 8585 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 1334.221748] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1334.223645] Call Trace: [ 1334.224264] dump_stack+0x107/0x167 [ 1334.225102] should_fail.cold+0x5/0xa [ 1334.225964] ? create_object.isra.0+0x3a/0xa20 [ 1334.227002] should_failslab+0x5/0x20 [ 1334.227880] kmem_cache_alloc+0x5b/0x310 [ 1334.228816] create_object.isra.0+0x3a/0xa20 [ 1334.229815] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1334.230968] __kmalloc+0x16e/0x390 [ 1334.231776] io_setup_async_rw+0x180/0x580 [ 1334.232760] io_read+0xe98/0x11e0 [ 1334.233565] ? kiocb_done+0xc90/0xc90 [ 1334.234429] ? mark_lock+0xf5/0x2df0 [ 1334.235289] ? lock_chain_count+0x20/0x20 [ 1334.236265] ? stack_trace_consume_entry+0x160/0x160 [ 1334.237420] ? lock_acquire+0x197/0x470 [ 1334.238376] ? lock_acquire+0x197/0x470 [ 1334.239325] ? __lock_acquire+0xbb1/0x5b00 [ 1334.240312] io_issue_sqe+0x2e8a/0x77b0 [ 1334.241220] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1334.242414] ? lock_chain_count+0x20/0x20 [ 1334.243354] ? __is_insn_slot_addr+0x14c/0x290 [ 1334.244396] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1334.245576] ? io_connect+0x610/0x610 [ 1334.246440] ? lock_acquire+0x197/0x470 [ 1334.247340] ? find_held_lock+0x2c/0x110 [ 1334.248271] ? __fget_files+0x2cf/0x520 [ 1334.249164] ? lock_downgrade+0x6d0/0x6d0 [ 1334.250094] __io_queue_sqe+0x90/0x9d0 [ 1334.250987] ? io_issue_sqe+0x77b0/0x77b0 [ 1334.251928] ? __fget_files+0x2f8/0x520 [ 1334.252839] ? io_prep_rw+0x7f5/0x1050 [ 1334.253724] io_submit_sqes+0x44aa/0x8610 [ 1334.254681] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1334.255805] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1334.256892] ? find_held_lock+0x2c/0x110 [ 1334.257818] ? io_submit_sqes+0x8610/0x8610 [ 1334.258807] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1334.259901] ? wait_for_completion_io+0x270/0x270 [ 1334.260992] ? rcu_read_lock_any_held+0x75/0xa0 [ 1334.262038] ? vfs_write+0x354/0xb10 [ 1334.262871] ? fput_many+0x2f/0x1a0 [ 1334.263691] ? ksys_write+0x1a9/0x260 [ 1334.264549] ? __ia32_sys_read+0xb0/0xb0 [ 1334.265463] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1334.266640] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1334.267825] do_syscall_64+0x33/0x40 [ 1334.268686] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1334.269846] RIP: 0033:0x7f0f01994b19 [ 1334.270896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1334.275055] RSP: 002b:00007f0efef0a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1334.276781] RAX: ffffffffffffffda RBX: 00007f0f01aa7f60 RCX: 00007f0f01994b19 [ 1334.278384] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1334.279994] RBP: 00007f0efef0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1334.281595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1334.283196] R13: 00007ffe18ea049f R14: 00007f0efef0a300 R15: 0000000000022000 [ 1334.295419] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 1334.297623] CPU: 0 PID: 8587 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 1334.299211] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1334.301086] Call Trace: [ 1334.301675] dump_stack+0x107/0x167 [ 1334.302504] sysfs_warn_dup.cold+0x1c/0x29 [ 1334.303468] sysfs_do_create_link_sd+0x122/0x140 [ 1334.304551] sysfs_create_link+0x5f/0xc0 [ 1334.305478] device_add+0x703/0x1c50 [ 1334.306319] ? devlink_add_symlinks+0x970/0x970 [ 1334.307365] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 1334.308554] wiphy_register+0x1da6/0x2850 [ 1334.309509] ? wiphy_unregister+0xb90/0xb90 [ 1334.310501] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1334.311699] ieee80211_register_hw+0x23c5/0x38b0 [ 1334.312793] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 1334.313875] ? net_generic+0xdb/0x2b0 [ 1334.314731] ? lockdep_init_map_type+0x2c7/0x780 [ 1334.315790] ? memset+0x20/0x50 [ 1334.316550] ? __hrtimer_init+0x12c/0x270 [ 1334.317487] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 1334.318626] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 1334.319665] ? hwsim_new_radio_nl+0x967/0x1080 [ 1334.320695] ? memcpy+0x39/0x60 [ 1334.321444] hwsim_new_radio_nl+0x991/0x1080 [ 1334.322434] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1334.323606] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 1334.325087] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1334.326551] genl_family_rcv_msg_doit+0x22d/0x330 [ 1334.327628] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1334.329099] ? cap_capable+0x1cd/0x230 [ 1334.329982] ? ns_capable+0xe2/0x110 [ 1334.330818] genl_rcv_msg+0x36a/0x5a0 [ 1334.331675] ? genl_get_cmd+0x480/0x480 [ 1334.332579] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1334.333734] ? lock_release+0x680/0x680 [ 1334.334620] ? netlink_deliver_tap+0xf4/0xcc0 [ 1334.335629] netlink_rcv_skb+0x14b/0x430 [ 1334.336548] ? genl_get_cmd+0x480/0x480 [ 1334.337454] ? netlink_ack+0xab0/0xab0 [ 1334.338334] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1334.339361] ? is_vmalloc_addr+0x7b/0xb0 [ 1334.340281] genl_rcv+0x24/0x40 [ 1334.341014] netlink_unicast+0x54e/0x800 [ 1334.341925] ? netlink_attachskb+0x870/0x870 [ 1334.342918] netlink_sendmsg+0x90f/0xe00 [ 1334.343833] ? netlink_unicast+0x800/0x800 [ 1334.344805] ? netlink_unicast+0x800/0x800 [ 1334.345750] __sock_sendmsg+0x154/0x190 [ 1334.346649] ____sys_sendmsg+0x70d/0x870 [ 1334.347570] ? sock_write_iter+0x3d0/0x3d0 [ 1334.348575] ? do_recvmmsg+0x6d0/0x6d0 [ 1334.349468] ___sys_sendmsg+0xf3/0x170 [ 1334.350343] ? sendmsg_copy_msghdr+0x160/0x160 [ 1334.351368] ? __fget_files+0x2cf/0x520 [ 1334.352278] ? lock_downgrade+0x6d0/0x6d0 [ 1334.353229] ? clockevents_program_event+0x14b/0x360 [ 1334.354380] ? __fget_files+0x2f8/0x520 [ 1334.355284] ? __fget_light+0xea/0x290 [ 1334.356178] __sys_sendmsg+0xe5/0x1b0 [ 1334.357039] ? __sys_sendmsg_sock+0x40/0x40 [ 1334.358031] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1334.359220] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1334.360381] ? trace_hardirqs_on+0x5b/0x180 [ 1334.361363] do_syscall_64+0x33/0x40 [ 1334.362198] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1334.363349] RIP: 0033:0x7f28518a8b19 [ 1334.364196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1334.368352] RSP: 002b:00007f284ee1e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1334.370069] RAX: ffffffffffffffda RBX: 00007f28519bbf60 RCX: 00007f28518a8b19 [ 1334.371680] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 1334.373281] RBP: 00007f2851902f6d R08: 0000000000000000 R09: 0000000000000000 [ 1334.374901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1334.376647] R13: 00007ffc5bf9fcaf R14: 00007f284ee1e300 R15: 0000000000022000 10:37:44 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xeffdffff, 0x0, 0x0, 0x0) 10:37:44 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfdef, 0x0, 0x0) 10:37:44 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 10:37:44 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x1, 0x2, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80000000}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, 0x2, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000050}, 0x4000014) r1 = dup(r0) r2 = dup(r1) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)={0x24, 0x42, 0x69844ea0a6ddcd11, 0x0, 0x0, {}, [@typed={0xd, 0x0, 0x0, 0x0, @str='[}\xef(.,)(\x00'}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)={0x26c, 0x0, 0xbf5f6607caa91955, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="641a2d131d0c435dccc3f68ac8d5d05e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="400aacd8adb84ccf5f1f4ad54f00cbb64736be4e78962b0b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="bca1fc0d3894041f252fa6cc1cfea36a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="92639e6e05c2da44fae0649363cda623"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7059865ee37cb78290840c6b206a09c21487e82acd2495a9"}]}, @NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9b19a1c97bc336686d333314fec1209ae41d80f18e94e1d4a5696cfef5d3a1ba"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c23db43424212af3ced437311e2d40afc2d0a72f77ff47e9d884a6515cc6814e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}]}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e30dc0865b64ab7b41cd6f90af72a12f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d117b9be994bbe0b"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7c40ca351e40fb02655e558327dd0c71"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="037173f14c364795c88d9ceac5c9bbf1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "625e068a02168186"}]}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1f}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "87dd71b371aba926"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "21d10e8a348cb548"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="8046224eb553418632971eb57964523ef44b11b4e9b563b6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b7ef8d44e95fa22e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "12d8a618a7532446"}]}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0xa8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "aab5fb7373e7df81"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f92fe8e0064531e846ae0e8daad34928"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b1d1814acdae443c046714d3e5384bef"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "541910480f23c655"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ed20d69b5d430c0e8189d6491aa8f382"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5bbbcfa6a949fb2e68c02ac9818dde57574276843de854e458e7cc3b75e495bd"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="29411390f57e751bc7246967a78a9a6739952d1c97a4d61b4f074b3875b784a6"}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x1}, 0x841) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, 0x1, 0x2, 0x401, 0x0, 0x0, {0x3}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), 0xffffffffffffffff) r6 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001140)={&(0x7f0000001200)=ANY=[@ANYBLOB="7c050000", @ANYRES16, @ANYBLOB="00080003000000000000000000000000000041a0303813b2d9a1ec67", @ANYRES32=r7, @ANYBLOB="0a000600080211000001000014003300e4000100080211000000c9f463ed293c0a000600080211000001000034053300883b0000ffffffffffff080211000001ffffffffffff0500ffffffffffff6606f811200060920546b5f90802110000005050505050503800a201d87f6788c349b91c3dbf7ab2163de5375ef4e36ea2f633216c4b7d592e624a728ca89ee7ce8363bc5abab476bfe38e6c810f84361a81e097f082be4421ba1aad850d944552a078718cf05a9e9a0a2f10b1e0479b19f040d5800acd7c99df9d41076d6191bab5ad8bed54bb3d46655a095a8e68d5d0ac86b934ff171856a42d3e05a6d60d24527261e53f272def18cafdc0ac40c2346a89dc7f7cc6b06d45c085d88f8f2e8f623f1dcd839e6b1e353069ac5305f65c5a77f184d60b3a216dfab079b3d70f7afd00781e2aa452829bfa62714d9a23e23d43a1900f457bec8f0b4b8cbfe108ad8c1f1de0b6ca822d695ac44a24496204ac07a5056e8049074505b4e25c6afb5db4934888553e0e348a8076568fd6ded6518e18a1808eaba2fcd8ee2cdea1b4d6f3d55f619852b234e114119b558fd5cb8f3ac59286cd8406be2ad38c7e5dd501ca4a2d017f72da00fc7924a95968ceb7407df472efa8c52305550edd053fde062d7a90e0b19d4dfe1ed80c598829b8a18f14551320b165a3536579441fddb5f3b7588a4951e97aafeefceb1dbfc56ef6c7f5db882c9608c978516f357323af62356a374e2d5380a894d11ff860a8b9a6707809113170c7a8b9f2d587727bf9954edfe9442ddd940fc8e8aab0a9ce1512bd647368464c1a4408394ba5930c5e8028500eb7b4110b126ae2adb407f32b4afe5eeec32c2e465cf330d165cf9dcddb4fad1cd0a82b2b24ad3d3a15dd11c47660b75ec0b21c7bbe4e0544cd84fde590bc47c086b09dcf207516620b8c71a6fb8beca65b536656e198b3de90f53d3352db86d7b8dbdbd2f3f290e8e0f0a4d97e44bde62a364e978913cd52a310e22c18705cbab3eca1be02083db302c173e1d43a4ee7db5e0accb0489164b4f770f83b054b6e0fc796714832c0e689c856f736d34f490c08950b35c99b81f8b205170e6e3882cbe2ca3013f98802507d0f3d9fa20beb411baaed6046d6d98c5af1636f54fc665dcc6eb62d02c34d64f0474ba51c0813e85c4633393c07ed5187b7f267841e4ab38f743c330f05f9f8e55541c90a04cf8a7d657f51d2efba3c4436838e891b2c7161984d7b8c5ddc246ac5f928524031f3dbe24d991e5eb6eeecec8cc177d9d58865059e16b8b1769168a7df22d35dd8cfcb2b8a5f2cc1a221ed951f321aa8cd5d26d693c03c5dfe03d95841df5a808c463824e218f8a773444aeb028e118c453b694482220a8923e279efb87ea689fe3b429843bbdaf76992a37549d4aa99b07f2e103fadc5592cba44cd3c8775cbdef4dc4b9c2f73064c64e69d57c2810150c87fe29508aeed45db6180bc578c63aa7173a8ee35680766078f5c166a1933eb9cde69a80c38523062b61293f384a910870f321209927b076d41a53b03fea65164d2d7f522352824ad16f5adb95d5fa6764a983eb4857f3b6d1b94b776334152fddefe0d1323f1e81ae5fedcf407922d5de12940076e62e44ea0645a48083b855fd070f11581c90e60bc02fe4926eb411cd4804aa65004560a9ec6280773e2148de0d73df441d976aa1518df1d91086bfa8c6c3387f00dc2cda1a733918c765134716449905532bd51560f616346704df857e403d1274e56a8df5f7f75c5670fafd912b9b9d23d03f6034a71d4c151f504e685f2d861a3ea21f7771f170d4d83b9d0af3f8fc05be63d09c01c9b80672b8717166ca9d5019156bd8d982db44617971332abf6721c09277b703050b9010f49a6aa1af19d9d0728d3ae4e993ff3b9d71d807b44c97804cfc338dc0f53"], 0x57c}, 0x1, 0x0, 0x0, 0x84}, 0x84) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x40, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x22}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x4b}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xf8000000, 0x1b}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004840}, 0x24000000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r5, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:kmsg_device_t:s0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000094}, 0x4004800) 10:37:44 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000000000, 0x0, 0x0) 10:37:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x800, 0x100, &(0x7f0000000140)) sendto$inet(r1, &(0x7f0000000000)="7836d17425e63d16c70ac0bd221e2e971de074e39b9788e2223afbe1f433ccbe875d243b81ac2cc482b04285e5196a1bfa7e4aae54d00029b3d3e0c4be920c1c", 0x40, 0x15, &(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010101}, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}}) 10:37:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000180)=0xe, 0x800) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ff020000000000000000060000000808030038ad34d428b73cfec3db7c2d5ea41fa2fbf5ceb90ae941bb44e6f446c27a032475b6edec0226468f734def810094085fcf8e5e3ee59c2449dfafa4c7c572e0a0de727d1d7ea7f408c7324986581d3754c13c74240d3db4a7638279b3d04fd7aae578", @ANYRES32=r3, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000380)=@random='y', 0x1, 0x0) 10:37:44 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) [ 1348.154960] FAULT_INJECTION: forcing a failure. [ 1348.154960] name failslab, interval 1, probability 0, space 0, times 0 [ 1348.157412] CPU: 1 PID: 8610 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 1348.158854] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1348.160608] Call Trace: [ 1348.161170] dump_stack+0x107/0x167 [ 1348.161937] should_fail.cold+0x5/0xa [ 1348.162748] ? __io_queue_sqe+0x666/0x9d0 [ 1348.163632] should_failslab+0x5/0x20 [ 1348.164447] kmem_cache_alloc_trace+0x55/0x320 [ 1348.165421] ? lock_downgrade+0x6d0/0x6d0 [ 1348.166308] __io_queue_sqe+0x666/0x9d0 [ 1348.167163] ? io_issue_sqe+0x77b0/0x77b0 [ 1348.168050] ? __fget_files+0x2f8/0x520 [ 1348.168904] ? io_prep_rw+0x7f5/0x1050 [ 1348.169747] io_submit_sqes+0x44aa/0x8610 [ 1348.170652] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1348.171724] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1348.172762] ? find_held_lock+0x2c/0x110 [ 1348.173634] ? io_submit_sqes+0x8610/0x8610 [ 1348.174563] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1348.175591] ? wait_for_completion_io+0x270/0x270 [ 1348.176638] ? rcu_read_lock_any_held+0x75/0xa0 [ 1348.177639] ? vfs_write+0x354/0xb10 [ 1348.178421] ? fput_many+0x2f/0x1a0 [ 1348.179197] ? ksys_write+0x1a9/0x260 [ 1348.180023] ? __ia32_sys_read+0xb0/0xb0 [ 1348.180890] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1348.182014] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1348.183122] do_syscall_64+0x33/0x40 [ 1348.183913] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1348.185020] RIP: 0033:0x7f0f01994b19 [ 1348.185814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1348.189756] RSP: 002b:00007f0efef0a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1348.191383] RAX: ffffffffffffffda RBX: 00007f0f01aa7f60 RCX: 00007f0f01994b19 [ 1348.192918] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1348.194438] RBP: 00007f0efef0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1348.195967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1348.196267] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1348.197489] R13: 00007ffe18ea049f R14: 00007f0efef0a300 R15: 0000000000022000 10:37:44 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfff5, 0x0, 0x0) [ 1348.231278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.233225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1348.235172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1348.262241] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 10:37:44 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x4000, 0x0, 0x0) 10:37:44 executing program 4: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x101000, 0x0) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000640)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x69) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = inotify_init1(0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x43) dup3(r3, r2, 0x0) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x427, r2, &(0x7f0000000080), 0x0, 0x100000000}, &(0x7f0000000180)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0x6a, 0x101, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x20, 0x0, 0x61, 0x6}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000b00)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000003c0)=""/165, 0xa5}, {&(0x7f00000004c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/146, 0x92}, {&(0x7f0000000080)=""/33, 0x21}, {&(0x7f0000000880)=""/218, 0xda}, {&(0x7f0000000980)=""/161, 0xa1}, {&(0x7f00000005c0)=""/107, 0x6b}, {&(0x7f0000000200)=""/51, 0x33}, {&(0x7f00000002c0)=""/55, 0x37}], 0x9}, 0x0, 0x40000063, 0x0, {0x3}}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) 10:37:44 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x40000000000000, 0x0, 0x0) 10:37:44 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x200000, 0x0, 0x0) 10:37:44 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xf5ffffff, 0x0, 0x0, 0x0) 10:37:45 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffd, 0x0, 0x0) 10:37:45 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7}, 0x0, 0x3, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r1, &(0x7f0000000140)="b2", 0x20000141, 0x8001) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2000}}, './file0/file0\x00'}) ioctl$PERF_EVENT_IOC_ID(r5, 0x80082407, &(0x7f00000000c0)) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r8, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1800a20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r8, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x101}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x28040800}, 0x804c055) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800c785326d46ff1449be01d1f98a186ff82ed815c205dfeda59cb4fe88f7760ca0bc8ceba83ff9d7aa9ec84ef0f031f03b3c20ab20a9296edc1279cea65488f1931be4ec23f9a55d26a4277ba9014778b272e0b42382a5e2421066a8225d34a20a9316ad668a5211f5cded6e4407f2f3fe87aca65599b8443a4ebfae7dab0cb2e3a41ae5a28549", @ANYRES16=r2, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r4, @ANYBLOB="0c0050800800030000000000"], 0x28}}, 0x0) 10:37:45 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x400000, 0x0, 0x0) 10:37:45 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) fcntl$setown(r2, 0x8, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee01}}, './file0\x00'}) fcntl$getownex(r3, 0x10, &(0x7f00000009c0)={0x0, 0x0}) tgkill(r1, r4, 0x7) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r4, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) 10:38:01 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ff, 0x0, 0x0) 10:38:01 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x442, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0xa}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000000)='mounts\x00') readv(r2, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000001980)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x53000, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x400cc0, 0xa6) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) getresuid(&(0x7f00000015c0), &(0x7f0000001800), &(0x7f0000001840)=0x0) stat(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) setresuid(0xffffffffffffffff, r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x300020, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="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", @ANYRESDEC=r5, @ANYBLOB=',dont_hash,seclabel,fscontext=sysadm_u,fowner=', @ANYRESDEC=r6, @ANYBLOB=',audit,\x00']) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) unshare(0x48020200) 10:38:01 executing program 4: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x7}, 0x4) r3 = syz_io_uring_setup(0x4960, &(0x7f0000000180)={0x0, 0x837b, 0x2, 0x3, 0x148, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004d00), 0x7ffff000, 0x811) msgget$private(0x0, 0x0) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000e66696c7f4be21c27bc42ed754200"]) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e22, 0x0, @loopback, 0x4}, {0xa, 0x4e21, 0x7ff, @loopback, 0xa80000}, 0x1, [0x9, 0x1, 0x8, 0x9, 0x5, 0xffffffff, 0x2, 0xf1c]}, 0x5c) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x100000001) readv(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/27, 0x1b}, {&(0x7f00000003c0)=""/39, 0x27}], 0x3) 10:38:01 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfffffdef, 0x0, 0x0, 0x0) 10:38:01 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) 10:38:01 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 10:38:01 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) 10:38:01 executing program 5: ptrace$getregs(0xc, 0x0, 0x5, &(0x7f0000000140)=""/128) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = msgget$private(0x0, 0x0) getresgid(&(0x7f00000010c0), &(0x7f0000001100)=0x0, &(0x7f0000001140)) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000001200)={{0x0, 0xee01, r4, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f}) r5 = getuid() getresgid(&(0x7f00000010c0), &(0x7f0000001100)=0x0, &(0x7f0000001140)) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000180)={{0x2, 0xee01, r4, r5, r6, 0x100, 0x3}, 0x0, 0x0, 0x7, 0x5, 0x7f, 0x1, 0xff, 0x8001, 0x8, 0x3, 0x0, 0xffffffffffffffff}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={r1, r2, r6}, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000080)="ed41000000100000d4f4655fd5f4655fd5f4655f00a2561875d5688a7cc902001efad0", 0x23, 0x4200}], 0x0, &(0x7f0000000040)) [ 1364.868992] FAULT_INJECTION: forcing a failure. [ 1364.868992] name failslab, interval 1, probability 0, space 0, times 0 [ 1364.871591] CPU: 1 PID: 8682 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 1364.873343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1364.875132] Call Trace: [ 1364.875694] dump_stack+0x107/0x167 [ 1364.876486] should_fail.cold+0x5/0xa [ 1364.877292] ? create_object.isra.0+0x3a/0xa20 [ 1364.878267] should_failslab+0x5/0x20 [ 1364.879067] kmem_cache_alloc+0x5b/0x310 [ 1364.879926] create_object.isra.0+0x3a/0xa20 [ 1364.880853] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1364.881939] kmem_cache_alloc_trace+0x151/0x320 [ 1364.882945] ? lock_downgrade+0x6d0/0x6d0 [ 1364.883822] __io_queue_sqe+0x666/0x9d0 [ 1364.884693] ? io_issue_sqe+0x77b0/0x77b0 [ 1364.885576] ? __fget_files+0x2f8/0x520 [ 1364.886430] ? io_prep_rw+0x7f5/0x1050 [ 1364.887266] io_submit_sqes+0x44aa/0x8610 [ 1364.888192] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1364.889256] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1364.890285] ? find_held_lock+0x2c/0x110 [ 1364.891154] ? io_submit_sqes+0x8610/0x8610 [ 1364.892076] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1364.893115] ? wait_for_completion_io+0x270/0x270 [ 1364.894141] ? rcu_read_lock_any_held+0x75/0xa0 [ 1364.895131] ? vfs_write+0x354/0xb10 [ 1364.895929] ? fput_many+0x2f/0x1a0 [ 1364.896708] ? ksys_write+0x1a9/0x260 [ 1364.897511] ? __ia32_sys_read+0xb0/0xb0 [ 1364.898377] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1364.899491] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1364.900601] do_syscall_64+0x33/0x40 [ 1364.901389] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1364.902478] RIP: 0033:0x7f0f01994b19 [ 1364.903264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1364.907188] RSP: 002b:00007f0efef0a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1364.908826] RAX: ffffffffffffffda RBX: 00007f0f01aa7f60 RCX: 00007f0f01994b19 [ 1364.910352] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1364.911870] RBP: 00007f0efef0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1364.913401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1364.914925] R13: 00007ffe18ea049f R14: 00007f0efef0a300 R15: 0000000000022000 10:38:01 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfdef, 0x0, 0x0) 10:38:01 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffdffffffffffff, 0x0, 0x0) 10:38:01 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffdffff, 0x0, 0x0) 10:38:01 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfffffff5, 0x0, 0x0, 0x0) 10:38:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x200000, 0x0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000140)=']\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='security.capability\x00'], 0x0, 0x100) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x4, &(0x7f0000000440), 0x4) fallocate(0xffffffffffffffff, 0x40, 0x80000000, 0x200) ftruncate(r0, 0x1000003) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000001c0)=0x2, 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x80000000) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x3, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x4000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xed14, 0xffffffff80000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r4, 0x0) ftruncate(r1, 0xffff) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfdef) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f0000000100)={'vlan1\x00', 0x8}) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000200)="5bbaa5ea75d0360e40eea549742b2edc50a653be34d8ac85574832c1c5c92d3856205f10ec078a7cd392d949ac6bcebd1318d6a17f6df82a989d6fcd36b717b1a3b5327f52b954a9f9f309f91b41", 0x4e}, {&(0x7f0000000080)="e3d65be569ade0eabb839ca1af983361287adfafa280796949746a2f97c6dcdc0db32a0b1a666dcffbf7bfcfa73078a1f69992093f42", 0x36}], 0x2) 10:38:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x81403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4, 0x3, 0xfffffffc, 0x2, 0x3, 0x400, 0xfffe, 0x0, 0xfffffffc, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2c4100, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) sendfile(0xffffffffffffffff, r2, 0x0, 0x3) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r5, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x43000, 0x3, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[]) sendfile(r1, r0, 0x0, 0xffffffff000) 10:38:01 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfff5, 0x0, 0x0) [ 1365.155793] EXT4-fs (sda): Unrecognized mount option "trans=fd" or missing value [ 1365.236592] EXT4-fs (sda): Unrecognized mount option "trans=fd" or missing value 10:38:01 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ffffffffffffff, 0x0, 0x0) 10:38:01 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ffffff, 0x0, 0x0) 10:38:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17, 0xffffffffffffffff}, {0x0, 0x0, 0x1001000a00}], 0x400, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000000)='mnt/encrypted_dir\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') 10:38:01 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xffffffff, 0x0, 0x0, 0x0) 10:38:01 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x200000, 0x0, 0x0) [ 1365.508811] loop7: detected capacity change from 0 to 41948160 [ 1365.524959] FAT-fs (loop7): bogus number of reserved sectors [ 1365.526387] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1365.589698] loop7: detected capacity change from 0 to 41948160 [ 1365.599823] FAT-fs (loop7): bogus number of reserved sectors [ 1365.601898] FAT-fs (loop7): Can't find a valid FAT filesystem 10:38:15 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5, 0x0, 0x0) 10:38:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000002140)="00000000001cc5fbc7ec50aa00000000000000b00cb2cc029f49d8b90449a7ecd54d49010000000c00000000000000dff4655f000000000000000000e6ffffff1a40c1f60623683c43ee13b0d7a15358c9be9639011a881e292f5b830048457a1152034aa4448280ca33c6de2eca5b21762f14f253d73c107088e03a3c2962f5205db9a248b331fc52ced18ee22d2819b4fa", 0x92, 0x4e0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0xfffffffffffffff9}, {&(0x7f0000000080)="ed41000000080000dff4655fe0f0655fe0f4655f000000000400000000ebe4329482f52d883fd29d8d6f0449b9452e6662e4ff1e140a6860900de2e36b9656368528ee152642a80860d79c9489f84fa975c4968a60aa", 0x56, 0x8}, {0x0, 0x12, 0x800007000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="76a51d22db90a7b4ee3c438a8f262414e2d7ef555abf6d832e307ff3ffffffffffffc94fb3ff878e219ed4bf391815f246a41bf8a85a9c5318b5675eba261a3cf8eb3eaf019051762c9989cac3c5949290be90d40276878e6a35162824a7b3308dbf35b9530c1d43bbf47ab2dc798b30e387cfd64b0fd71cbe6469d629a8f960e42de26224d0f7e658b3843bc099fe2048a7d7f6599c441495184086906ced59b8022021"]) 10:38:15 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x400000, 0x0, 0x0) 10:38:15 executing program 7: mlock2(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x5e, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xffffffff, 0x2}, 0x11010, 0x8, 0x0, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x2) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x7) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x3, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x5, 0x54210, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x9e, 0x8}, 0x11a4, 0x1, 0x0, 0x9, 0xc1d9, 0xa30, 0x8, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x4, 0xffffffffffffffff, 0x8) ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f00000000c0)) kcmp(0x0, 0x0, 0x1, r0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x2, 0x110, 0xffffffffffffffff, 0x8000000) pkey_mprotect(&(0x7f0000ff0000/0x3000)=nil, 0x3000, 0x4, r1) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) 10:38:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) sendmsg$nl_generic(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x10c, 0x33, 0x8, 0x70bd26, 0x25dfdbfb, {0x1a}, [@generic="3552637cfae21c36a2d9400e048630d8a399c914c7b7fd", @typed={0x8, 0x8f, 0x0, 0x0, @pid}, @generic="8ec69b80e86691003d137e289510299c90afb9ccf79032ce7163d30167bd7d631ab39369c25d62c8bd5bd688200c896e3780791bd46bc82eed911f1db5c0b576cdd09077f4a8bbc3bffc700f346e1c594398703ad9812b1162e13d474a97466e0b5e1b7a7ab6668e16ca47ae115aa388f011fdb05dd49a1c0b4574b38c5b8ccf86af486f8c39326e48b085ba507fada1d14d6f3556fcfe0c97635aa1bac1ecd23a8bdea120b0dc0cb47409c561fe55347e2d05d0bb2f68262070b72c37fd1b11276805fd7968c3b248a42762ac6a047122a231205861"]}, 0x10c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ftruncate(r0, 0x1000003) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x4) write$binfmt_elf64(r2, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x10) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) write(r3, &(0x7f0000000100)='?', 0x1) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x10010, r3, 0x800000000000202) lseek(r3, 0x0, 0x1) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 10:38:15 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0) 10:38:15 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 10:38:15 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffdef, 0x0, 0x0) [ 1378.921608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=8758 comm=syz-executor.4 [ 1378.934132] FAULT_INJECTION: forcing a failure. [ 1378.934132] name failslab, interval 1, probability 0, space 0, times 0 [ 1378.936087] CPU: 1 PID: 8760 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 1378.936843] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1378.937754] Call Trace: [ 1378.938051] dump_stack+0x107/0x167 [ 1378.938447] should_fail.cold+0x5/0xa [ 1378.938862] ? __io_queue_proc+0x262/0x5a0 [ 1378.939324] should_failslab+0x5/0x20 [ 1378.939735] kmem_cache_alloc_trace+0x55/0x320 [ 1378.940235] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1378.940797] __io_queue_proc+0x262/0x5a0 [ 1378.941232] ? io_poll_queue_proc+0x50/0x50 [ 1378.941711] n_tty_poll+0xc0/0x900 [ 1378.942100] ? n_tty_ioctl+0x370/0x370 [ 1378.942587] tty_poll+0x144/0x1c0 [ 1378.943086] ? tty_release+0xe90/0xe90 [ 1378.943558] __io_arm_poll_handler+0x399/0x9e0 [ 1378.944233] __io_queue_sqe+0x52b/0x9d0 [ 1378.944849] ? io_issue_sqe+0x77b0/0x77b0 [ 1378.945371] ? __fget_files+0x2f8/0x520 [ 1378.945798] ? io_poll_queue_proc+0x50/0x50 [ 1378.946388] ? io_prep_rw+0x7f5/0x1050 [ 1378.946923] io_submit_sqes+0x44aa/0x8610 [ 1378.947543] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1378.948275] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1378.948987] ? find_held_lock+0x2c/0x110 [ 1378.949437] ? io_submit_sqes+0x8610/0x8610 [ 1378.949948] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1378.950608] ? wait_for_completion_io+0x270/0x270 [ 1378.951312] ? rcu_read_lock_any_held+0x75/0xa0 [ 1378.952000] ? vfs_write+0x354/0xb10 [ 1378.952588] ? fput_many+0x2f/0x1a0 [ 1378.952985] ? ksys_write+0x1a9/0x260 [ 1378.953401] ? __ia32_sys_read+0xb0/0xb0 [ 1378.953972] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1378.954661] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1378.955375] do_syscall_64+0x33/0x40 [ 1378.955917] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1378.956566] RIP: 0033:0x7f0f01994b19 [ 1378.956977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1378.959468] RSP: 002b:00007f0efef0a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1378.960617] RAX: ffffffffffffffda RBX: 00007f0f01aa7f60 RCX: 00007f0f01994b19 [ 1378.961424] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1378.962364] RBP: 00007f0efef0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1378.963376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1378.964377] R13: 00007ffe18ea049f R14: 00007f0efef0a300 R15: 0000000000022000 10:38:15 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000003, 0x10010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000000)=""/90, &(0x7f0000000180)=0x5a) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001380), 0x0, 0x4000000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB="01006100010000000d8dc52bb489356732f6154e678e188c1000", @ANYRES32, @ANYBLOB="00000000000000e32d2f66696c653000"]) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYBLOB="110d0000000000000000700000000ca85873922b64ba470086d6995a47285b02048ee9bc0bcb14cdeabd4374c71e749f2f17"], 0x20}, 0x1, 0x0, 0x0, 0xc801}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 10:38:15 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) 10:38:15 executing program 7: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) fcntl$setown(r0, 0x8, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) dup3(r2, r0, 0x0) 10:38:15 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffff5, 0x0, 0x0) 10:38:15 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) 10:38:15 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffffffffffdef, 0x0, 0x0) 10:38:15 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffffffffffff5, 0x0, 0x0) 10:38:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)={0x24, 0x42, 0x69844ea0a6ddcd11, 0x0, 0x0, {}, [@typed={0xd, 0x0, 0x0, 0x0, @str='[}\xef(.,)(\x00'}]}, 0x24}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf4, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x82d}}, {@nsim={{0x8}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x678}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x100}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x2400c081}, 0x8000) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) write$binfmt_elf64(r3, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x4, 0x40, 0x8, 0xfffffffffffffffd, 0x3, 0x6, 0x9, 0x2fa, 0x40, 0x3, 0xfffffff7, 0x81, 0x38, 0x1, 0x2, 0x5, 0xf0a}, [{0x70000000, 0x40, 0x80000000, 0x2, 0x8, 0x5, 0x3, 0x1}], "3d1fc3d08397aa265312149d48deec080a2a7a5125a3802d239553ab3781931d41e7b8187c9b975a85da8b644829cafc71e3abda648a9cda5d00f5c86ac0115bfd1d5c051b75b8a21d0fe3c9aa21617c78bd670921902182908d9b98fb29c3", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7d7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000100)=ANY=[], 0x10) sendfile(r3, r4, 0x0, 0x100000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) sendfile(r2, r5, 0x0, 0x100000001) 10:38:15 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffdffff, 0x0, 0x0) 10:38:15 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x4000, 0x0, 0x0) 10:38:15 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x2c0, 0x0) unshare(0x40000200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000001060102000000010000000001208bf0b1f1000003050001412c1a3df2da2e63dec7ec6ea5d1f94aa58051b4ce694517df9b0224e8a95251de63d8ae45b0bd343afa6a5eb65ed2a1a659c6cb5fe094097021ce521b0f5b1bf86c9be415c12568a5195214a9d8bcfa0172a9f8f62f31b2e43a6ddd74e9a747978524896dcf59eb14da6a846613ce6a2edcda8161db29607adc339955d3922a6cd97c80434785db754d2d910289b5a42a1a52c66a616e9c4b64de1f58941b364612a8d1abfc0f084741261711bcae80e7ac3fad3430119bad4b2af81b6b00"/230], 0x1c}, 0x1, 0x0, 0x0, 0x20004054}, 0x8804) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001a00210000", @ANYRES32, @ANYBLOB="04001a80"], 0x20}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'ip6gre0\x00', {0x7}, 0x200}) 10:38:15 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000000000, 0x0, 0x0) [ 1379.430185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8803 comm=syz-executor.4 [ 1379.633140] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1379.770409] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1380.217174] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8819 comm=syz-executor.4 10:38:29 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffffffffffff, 0x0, 0x0) 10:38:29 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='clear_refs\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = creat(0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = gettid() sched_setaffinity(r3, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x42808, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="316361636865946d550a702c00"]) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) 10:38:29 executing program 4: sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={0x0}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x2, 0x100000001, 0xd766}) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) 10:38:29 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) openat(r1, &(0x7f0000000000)='./file1\x00', 0x1e1200, 0x26) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c46040000000000000000000000020006000000cc74948ce682491900000000000000000000000020"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 10:38:29 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffd, 0x0, 0x0) 10:38:29 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ffffff, 0x0, 0x0) 10:38:29 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 10:38:29 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x40000000000000, 0x0, 0x0) 10:38:29 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5) [ 1393.417313] FAULT_INJECTION: forcing a failure. [ 1393.417313] name failslab, interval 1, probability 0, space 0, times 0 10:38:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x7, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x7ffff000, 0x811) fallocate(r3, 0x20, 0x1000, 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) r5 = accept4$bt_l2cap(r1, 0x0, 0x0, 0x1c0000) inotify_init() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r6 = dup3(r2, r5, 0x80000) syz_io_uring_setup(0x44e7, &(0x7f0000000140)={0x0, 0x6edc, 0x10, 0x1, 0x3d2, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r2, 0x0, 0x7ffffff9) [ 1393.419908] CPU: 1 PID: 8841 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 1393.421571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1393.423324] Call Trace: [ 1393.423886] dump_stack+0x107/0x167 [ 1393.424672] should_fail.cold+0x5/0xa [ 1393.425481] ? create_object.isra.0+0x3a/0xa20 [ 1393.426454] should_failslab+0x5/0x20 [ 1393.427257] kmem_cache_alloc+0x5b/0x310 [ 1393.428117] create_object.isra.0+0x3a/0xa20 [ 1393.429051] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1393.430139] kmem_cache_alloc_trace+0x151/0x320 [ 1393.431135] __io_queue_proc+0x262/0x5a0 [ 1393.431997] ? io_poll_queue_proc+0x50/0x50 [ 1393.432917] n_tty_poll+0xc0/0x900 [ 1393.433661] ? n_tty_ioctl+0x370/0x370 [ 1393.434491] tty_poll+0x144/0x1c0 [ 1393.435220] ? tty_release+0xe90/0xe90 [ 1393.436040] __io_arm_poll_handler+0x399/0x9e0 [ 1393.437029] __io_queue_sqe+0x52b/0x9d0 [ 1393.437885] ? io_issue_sqe+0x77b0/0x77b0 [ 1393.438755] ? __fget_files+0x2f8/0x520 [ 1393.439606] ? io_poll_queue_proc+0x50/0x50 [ 1393.440530] ? io_prep_rw+0x7f5/0x1050 [ 1393.441354] io_submit_sqes+0x44aa/0x8610 [ 1393.442264] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1393.443322] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1393.444363] ? find_held_lock+0x2c/0x110 [ 1393.445241] ? io_submit_sqes+0x8610/0x8610 [ 1393.446160] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1393.447208] ? wait_for_completion_io+0x270/0x270 [ 1393.448225] ? rcu_read_lock_any_held+0x75/0xa0 [ 1393.449224] ? vfs_write+0x354/0xb10 [ 1393.450018] ? fput_many+0x2f/0x1a0 [ 1393.450793] ? ksys_write+0x1a9/0x260 [ 1393.451600] ? __ia32_sys_read+0xb0/0xb0 [ 1393.452468] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1393.453585] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1393.454684] do_syscall_64+0x33/0x40 [ 1393.455472] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1393.456566] RIP: 0033:0x7f0f01994b19 [ 1393.457343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1393.461248] RSP: 002b:00007f0efef0a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1393.462864] RAX: ffffffffffffffda RBX: 00007f0f01aa7f60 RCX: 00007f0f01994b19 [ 1393.464395] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1393.465910] RBP: 00007f0efef0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1393.467420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1393.468935] R13: 00007ffe18ea049f R14: 00007f0efef0a300 R15: 0000000000022000 10:38:29 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffdef, 0x0, 0x0) 10:38:44 executing program 7: setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x28) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0xb5, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x30}, 0x0, 0x20000040}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x406800, 0x175) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1d}, 0x80000001) signalfd(0xffffffffffffffff, &(0x7f0000001500), 0x8) r4 = socket$inet(0x2, 0x1, 0x0) dup3(r4, r3, 0x0) io_uring_enter(r0, 0x3491, 0x0, 0x0, 0x0, 0x0) 10:38:44 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 10:38:44 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) 10:38:44 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffff5, 0x0, 0x0) 10:38:44 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x1, 0x4000, @fd_index=0x9, 0x3, &(0x7f0000000440)=[{&(0x7f0000000340)="1168cb44795a815ff7d7b3060397548234d4253bef0024291d4862ad4927b7db35b5e8f741905cf923787e8fb7b016b8813d0693e06f31da48c435aac22c4479ab28494c29f56453251595f059de90a16f669bbf7da68094961655e7b37a75cdcf8965f4144a72c6906cc6cd8f9effd64404efb4c4efc7ce37dbfcc41615db7fceb07eff2ce4d34c1e2acf08bbd566cce89967027068af1d5abed4d5712346a2f443b95efca6bfab3134486bd44e12bf14ac69f85210d9b1cdeac8f618f4749c3b3c26eeac3464900150a82be1a34f9ee260b877dc98bef9a4abc32260379966fddbd584ec646769d9a18cde", 0xec}, {&(0x7f0000000180)="c03099ed27c22c031cc1d2baac799c01ff8423823a9ea8fbb0b67611a0fe83578586d45e9dcc47085879a124ce32ecdfcc4a9b9a604b050d556bfa3d8972d6b6be529b034753a8411b7ebd46190d89db134cef8c99d3a8f7ec808346856d8f4c11012db84d6d2cb29a8ef3b137dcd20b1f15a04e5cf9d3699f9d", 0x7a}], 0x2, 0x18, 0x0, {0x2}}, 0xa640) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) 10:38:44 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 10:38:44 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ff, 0x0, 0x0) 10:38:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)={0x24, 0x42, 0x69844ea0a6ddcd11, 0x0, 0x0, {}, [@typed={0xd, 0x0, 0x0, 0x0, @str='[}\xef(.,)(\x00'}]}, 0x24}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={@ipv4, 0x0, r3}) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f00000002c0)={0x3, 0xd5, "ad2d85d52eae77edfc1684ed176fd865a4bab5b474f4ff0e8afaa3e54abf482c292899a4b47323e73f7d07245c21c32493b0f2213ab7eee156778a40b64ecea3094cd1a0496093af508c8b32304638fbef646638545906b9b118abf2fd24d6d24db2ad02d38084a89fded8ab0d29a69479483a393b236ed1d96e428a2f59487c5040f091daa920ce50805998d5510504474c87c1df509c454ec4659e12506a9e30c35a069fba27b08ca019521676a89390f9f9c7b84175e61afbb0b5f8848249c06e0a90a47a6c7ecfdc36e9cb31ecd63072cd2bb3"}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x40) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x6000}], 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6a6f755d2cf0d6169b0fa90c2929b84e8c726e616c5f6173796e635f636f6d6d69742c00"]) [ 1407.671050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8882 comm=syz-executor.5 [ 1407.682600] FAULT_INJECTION: forcing a failure. [ 1407.682600] name failslab, interval 1, probability 0, space 0, times 0 [ 1407.685068] CPU: 1 PID: 8881 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 1407.686509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1407.688254] Call Trace: [ 1407.688826] dump_stack+0x107/0x167 [ 1407.689603] should_fail.cold+0x5/0xa [ 1407.690410] ? __io_queue_proc+0x262/0x5a0 [ 1407.691321] should_failslab+0x5/0x20 [ 1407.692126] kmem_cache_alloc_trace+0x55/0x320 [ 1407.693102] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1407.694182] __io_queue_proc+0x262/0x5a0 [ 1407.695033] ? io_poll_queue_proc+0x50/0x50 [ 1407.695950] n_tty_poll+0xc0/0x900 [ 1407.696710] ? n_tty_ioctl+0x370/0x370 [ 1407.697542] tty_poll+0x144/0x1c0 [ 1407.698281] ? tty_release+0xe90/0xe90 [ 1407.699102] __io_arm_poll_handler+0x399/0x9e0 [ 1407.700082] __io_queue_sqe+0x52b/0x9d0 [ 1407.700943] ? io_issue_sqe+0x77b0/0x77b0 [ 1407.701819] ? __fget_files+0x2f8/0x520 [ 1407.702664] ? io_poll_queue_proc+0x50/0x50 [ 1407.703585] ? io_prep_rw+0x7f5/0x1050 [ 1407.704416] io_submit_sqes+0x44aa/0x8610 [ 1407.705326] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1407.706379] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1407.707404] ? find_held_lock+0x2c/0x110 [ 1407.708272] ? io_submit_sqes+0x8610/0x8610 [ 1407.709196] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1407.710220] ? wait_for_completion_io+0x270/0x270 [ 1407.711242] ? rcu_read_lock_any_held+0x75/0xa0 [ 1407.712226] ? vfs_write+0x354/0xb10 [ 1407.713023] ? fput_many+0x2f/0x1a0 [ 1407.713792] ? ksys_write+0x1a9/0x260 [ 1407.714597] ? __ia32_sys_read+0xb0/0xb0 [ 1407.715460] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1407.716583] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1407.717679] do_syscall_64+0x33/0x40 [ 1407.718471] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1407.719563] RIP: 0033:0x7f0f01994b19 [ 1407.720354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1407.724270] RSP: 002b:00007f0efef0a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1407.725894] RAX: ffffffffffffffda RBX: 00007f0f01aa7f60 RCX: 00007f0f01994b19 [ 1407.727410] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1407.729120] RBP: 00007f0efef0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1407.730626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1407.732135] R13: 00007ffe18ea049f R14: 00007f0efef0a300 R15: 0000000000022000 10:38:44 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000000000, 0x0, 0x0) [ 1407.744730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8894 comm=syz-executor.5 10:38:44 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffdffffffffffff, 0x0, 0x0) 10:38:44 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7ffff000, 0x811) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d", 0x33, 0xb800}], 0x0, &(0x7f0000000180)) 10:38:44 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfdef, 0x0, 0x0) 10:38:44 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1080, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x400200, 0x45) r2 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x16}, &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) fcntl$addseals(r0, 0x409, 0x8) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:38:44 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/4\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x806c2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="44bbc5f7d1eb7ba808e9f85bf16bf50bffd5dccbffacb2b0ccdb81be6227b65979920f1f4c2f369aafa6368f114894ecf1b0ac8fc8e81796a2e0896a5b68447b2af578f5041c30246b12343d931c355af17b1f9da1707e43d171354bcf920c185ef1352eac41b323c1e740427accab108deca5299c5d9133bd37b5b6c37d0a6d1622614dce055bcf2fe2c1a04cd34788e4a7272d7fa413882c8aa667bcfae70cdfeb1724925965b28c0b019f3621b32534e8b6ef4249005edbb544eb6cbcca221ef4f3690d62438aaad8a84267a03e80801008d065edbcf5f845689a2f76d20ab5644721d963f62ac1eb8ae022b93c42d54c1e175659be3351d34e7fdb74a3647188438b2ce25af236e4fe143c6a3ae88f26905eb178a2957f"]) sendfile(r3, r1, &(0x7f0000000380)=0xffffffff00000000, 0x400) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYRES64], 0x14}, 0x1, 0x0, 0x0, 0x4048004}, 0x44004) r4 = syz_io_uring_setup(0x29, &(0x7f0000000080)={0x0, 0x5236, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) eventfd(0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000340)={0x0, 0x0, 0x6, 0x80000000}) syz_io_uring_setup(0xabb, &(0x7f0000000200)={0x0, 0xd992, 0x20, 0x1, 0x29d, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000300)) io_uring_enter(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0xff7f, 0x0, 0x0) r6 = getpid() syz_open_procfs(r6, &(0x7f0000000100)='net/vlan/vlan1\x00') ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5, @out_args}, './file1\x00'}) fcntl$setstatus(r2, 0x4, 0x6400) write(r2, &(0x7f0000001200), 0xffffff45) 10:38:44 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000) 10:38:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = openat(r0, &(0x7f0000000780)='./file0\x00', 0x2c0000, 0x158) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)}, {&(0x7f0000000340)}, {0x0}], 0x4) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x1, 0x0, &(0x7f0000000640), 0x880000, &(0x7f0000000140)=ANY=[@ANYBLOB="ff000000", @ANYRESHEX=r1, @ANYRESDEC]) fallocate(r3, 0x0, 0x0, 0x8000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x36) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r5 = syz_io_uring_setup(0x4d4c, &(0x7f00000004c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x6, &(0x7f0000000180)={r9, r10+60000000}, 0x1, 0x1, 0x0, {0x0, r11}}, 0x7) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x2}) 10:38:58 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ffffffffffffff, 0x0, 0x0) 10:38:58 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') mount$9p_unix(&(0x7f00000002c0)='./file1\x00', &(0x7f00000004c0)='./file1\x00', &(0x7f0000000940), 0x2021, &(0x7f0000000980)=ANY=[@ANYBLOB="7472616e733d756e69782c70726976706f72742c76657273acf5c7176b8583c6a82753696f6e3d39703276657273696f6e3d3970323030302e4c2b7065726d69745f6469726563"]) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x14, 0x18, 0x800, 0x3, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x8, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}], [{@smackfstransmute}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@smackfshat}, {@smackfsfloor={'smackfsfloor', 0x3d, '-@\x00'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@audit}]}}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000280)='./file1\x00', 0x2) 10:38:58 executing program 5: perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', 0x0, 0x6, 0x0, 0x0, 0x100c428, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0x9862, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="6772706a71756f74613d2e2f9f3a7d5f7c1960bdb2c0af66696c65312c6d61785f62617463685f74696d653d30783030303030303030303030301036659fafadb125bf322c7573726a71756f74613d2c746573745f64756d6d79df656e6372797074696f6e2c626172726965723d3078303030303030303030303031303030302c64656c616c6c6f632c736d61636b6673666c6f6f723d2c686173682c726f6f74636f6e74752c657569643e", @ANYRESDEC=0xee00, @ANYBLOB="2d6d6173efc2abac12f007707851e340476b3d5ec79e3dc3526209000000b88d5294ac289871a6d687a9d966c0efcf9fcff0be2f74d1bc108c48975ee9122dfcffffffffffffff2fe2f77a9342d4cb92c894ca28238d8b0fea789e8c37e0cbc83274415d6b4fc81f6a46e12b"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x10, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2f6465012f6ec1616e43"], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='hugetlbfs\x00', 0x10000, 0x0) socketpair(0xa, 0x3, 0x1, &(0x7f0000000180)) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x8}) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)=[&(0x7f0000000300)='\'\x85]\x00', &(0x7f0000000340)='-\x00', &(0x7f00000003c0)='/dev/nbd', &(0x7f0000000400)='/dev/nbd', &(0x7f0000000440)='@$\x00'], &(0x7f0000000540)=[&(0x7f00000004c0)='hugetlbfs\x00', &(0x7f0000000500)='+\x80:\x00'], 0x1000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x7b, 0x0) r2 = memfd_create(&(0x7f00000004c0)='\x02!9\x91\xfd\x00\xe4\x12\xfc\xe4\xf4\xe3d\xb1\xf4\x8a\x01\xd9qE\n\nQP\xb2\xbb\xcd`\x00\x00\xc97\xf6\x81\xf9k\x8f3\xb8\xee\x8b\xce\xad\xbf\b \xd5\x8f{\x80\xe7\x9f\xfc#XO\xbd\x00\x00\x83\x82\xac\f\x85B\x9bV2\xfa\xdd\akp?\x00@?\x18\x1ft\x9d\xa9f\x1d\x9de\xa5G\xaa\x0f\x1f2N\xf5{\x98\xbe\xbb\x1e\x14\xd3\xc4\x9e\xf7\xd1\x1f\xa5\xba\xc5u\x1e\xa5\x1a\xa6f\xee\xf9\x18\xafC\x88\xf1E\xa3/\x12\xac\x1e\x9b\x9c\x85x\x87\x05{\xc1\xe1\b\x0f@\x03+mh\xa7i\x9b\xa2~A3\x1c\xb3\x0e\xc3\x18\x14~T\xd5\xdaH\xcb\xb3q\x1b\x98\xae\x98m\aEp\xf5\n\xba1\x10\xd7\xcf\x05G\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\xf3jT\xbe\x9d\xf1/\x8d\x1dpTs?\xb1\x1d\x7f$\xe46\xdf\xac\xab\xd1E\xb9w\x97|\x1fBO\xce\x95\xbb\x9eNsJGZ\xc5 M9\x9b\x004\xc3Of', 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000140)=0x1) read(r2, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}, 0xa000, 0xfffff7fffffffffe, 0x0, 0x7, 0x91f9, 0x2, 0xcbd2, 0x0, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) 10:38:58 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfff5, 0x0, 0x0) 10:38:58 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 10:38:58 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeffd) 10:38:58 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x40000000000000, 0x0, 0x0) [ 1421.849024] loop7: detected capacity change from 0 to 262144 [ 1421.886369] FAULT_INJECTION: forcing a failure. [ 1421.886369] name failslab, interval 1, probability 0, space 0, times 0 [ 1421.889229] CPU: 0 PID: 8942 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 1421.890785] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1421.892681] Call Trace: [ 1421.893309] dump_stack+0x107/0x167 [ 1421.894165] should_fail.cold+0x5/0xa [ 1421.895030] ? create_object.isra.0+0x3a/0xa20 [ 1421.896063] should_failslab+0x5/0x20 [ 1421.896931] kmem_cache_alloc+0x5b/0x310 [ 1421.897849] create_object.isra.0+0x3a/0xa20 [ 1421.898845] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1421.900005] __kmalloc+0x16e/0x390 [ 1421.900824] io_setup_async_rw+0x180/0x580 [ 1421.901786] io_read+0xe98/0x11e0 [ 1421.902579] ? register_lock_class+0xbb/0x17b0 [ 1421.903606] ? find_held_lock+0x2c/0x110 [ 1421.904523] ? kiocb_done+0xc90/0xc90 [ 1421.905386] ? mark_lock+0xf5/0x2df0 [ 1421.906229] ? lock_downgrade+0x6d0/0x6d0 [ 1421.907167] ? lock_chain_count+0x20/0x20 [ 1421.908130] ? queue_delayed_work_on+0xe0/0xe0 [ 1421.909174] ? __lock_acquire+0xbb1/0x5b00 [ 1421.910138] io_issue_sqe+0x2e8a/0x77b0 [ 1421.911039] ? find_held_lock+0x2c/0x110 [ 1421.911956] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1421.913147] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1421.914209] ? lock_downgrade+0x6d0/0x6d0 [ 1421.915153] ? io_connect+0x610/0x610 [ 1421.916023] ? lock_acquire+0x197/0x470 [ 1421.916926] ? find_held_lock+0x2c/0x110 [ 1421.917849] ? __fget_files+0x2cf/0x520 [ 1421.918761] ? lock_downgrade+0x6d0/0x6d0 [ 1421.919705] __io_queue_sqe+0x90/0x9d0 [ 1421.920589] ? io_issue_sqe+0x77b0/0x77b0 [ 1421.921529] ? __fget_files+0x2f8/0x520 [ 1421.922434] ? io_prep_rw+0x7f5/0x1050 [ 1421.923326] io_submit_sqes+0x44aa/0x8610 [ 1421.924290] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1421.925427] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1421.926513] ? find_held_lock+0x2c/0x110 [ 1421.927441] ? io_submit_sqes+0x8610/0x8610 [ 1421.928424] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1421.929524] ? wait_for_completion_io+0x270/0x270 [ 1421.930625] ? rcu_read_lock_any_held+0x75/0xa0 [ 1421.931689] ? vfs_write+0x354/0xb10 [ 1421.932531] ? fput_many+0x2f/0x1a0 [ 1421.933369] ? ksys_write+0x1a9/0x260 [ 1421.934233] ? __ia32_sys_read+0xb0/0xb0 [ 1421.935151] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1421.936338] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1421.937510] do_syscall_64+0x33/0x40 [ 1421.938349] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1421.939507] RIP: 0033:0x7f0f01994b19 [ 1421.940349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1421.944531] RSP: 002b:00007f0efef0a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1421.946269] RAX: ffffffffffffffda RBX: 00007f0f01aa7f60 RCX: 00007f0f01994b19 [ 1421.947895] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1421.949507] RBP: 00007f0efef0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1421.951126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1421.952752] R13: 00007ffe18ea049f R14: 00007f0efef0a300 R15: 0000000000022000 [ 1421.990244] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue 10:38:58 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffffffffffdef, 0x0, 0x0) 10:38:58 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x200000, 0x0, 0x0) [ 1422.043205] 9pnet: Insufficient options for proto=fd [ 1422.065164] 9pnet: Insufficient options for proto=fd 10:38:58 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5ff) 10:38:58 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) 10:38:58 executing program 4: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) openat(r0, &(0x7f0000000040)='./file0\x00', 0x200, 0x44) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x14, 0x0, 0x0) 10:38:58 executing program 7: ftruncate(0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000003600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="080083", @ANYRES32=0x0, @ANYRES32=0x0], 0x2624}}, 0x8801) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x100000000}, &(0x7f0000000180)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000007c0)={0x0, 0x6, 0x3, 0x6}) io_submit(r0, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e24, 0x6, @loopback, 0x400}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x7ffff000, 0x811) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x7ffff000, 0x811) dup3(0xffffffffffffffff, r3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200), 0xffffffffffffffff) 10:38:58 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000200)='fusectl\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x8c) r1 = fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="3c0000002100000003000000030000000220000080"]}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f00000004c0)={0x200000000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100), {0x10}, &(0x7f00000001c0), 0x0, &(0x7f0000000400)=""/80, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x8080, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) 10:38:58 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 10:38:58 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffffffffffff5, 0x0, 0x0) [ 1422.355735] FAULT_INJECTION: forcing a failure. [ 1422.355735] name failslab, interval 1, probability 0, space 0, times 0 [ 1422.357040] CPU: 1 PID: 8988 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 1422.357835] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1422.358809] Call Trace: [ 1422.359141] dump_stack+0x107/0x167 [ 1422.359582] should_fail.cold+0x5/0xa [ 1422.360026] ? __io_queue_sqe+0x666/0x9d0 [ 1422.360501] should_failslab+0x5/0x20 [ 1422.360945] kmem_cache_alloc_trace+0x55/0x320 [ 1422.361477] ? lock_downgrade+0x6d0/0x6d0 [ 1422.361950] __io_queue_sqe+0x666/0x9d0 [ 1422.362403] ? io_issue_sqe+0x77b0/0x77b0 [ 1422.362879] ? __fget_files+0x2f8/0x520 [ 1422.363341] ? io_prep_rw+0x7f5/0x1050 [ 1422.363789] io_submit_sqes+0x44aa/0x8610 [ 1422.364274] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1422.364847] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1422.365407] ? find_held_lock+0x2c/0x110 [ 1422.365870] ? io_submit_sqes+0x8610/0x8610 [ 1422.366372] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1422.366935] ? wait_for_completion_io+0x270/0x270 [ 1422.367491] ? rcu_read_lock_any_held+0x75/0xa0 [ 1422.368030] ? vfs_write+0x354/0xb10 [ 1422.368454] ? fput_many+0x2f/0x1a0 [ 1422.368880] ? ksys_write+0x1a9/0x260 [ 1422.369310] ? __ia32_sys_read+0xb0/0xb0 [ 1422.369774] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1422.370383] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1422.370971] do_syscall_64+0x33/0x40 [ 1422.371401] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1422.371987] RIP: 0033:0x7f0f01994b19 [ 1422.372412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1422.374517] RSP: 002b:00007f0efef0a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1422.375391] RAX: ffffffffffffffda RBX: 00007f0f01aa7f60 RCX: 00007f0f01994b19 [ 1422.376213] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1422.377040] RBP: 00007f0efef0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1422.377861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1422.378681] R13: 00007ffe18ea049f R14: 00007f0efef0a300 R15: 0000000000022000 10:38:58 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x400000, 0x0, 0x0) [ 1422.420612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1422.421604] print_req_error: 938 callbacks suppressed [ 1422.421615] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1422.423386] buffer_io_error: 998 callbacks suppressed [ 1422.423393] Buffer I/O error on dev sr0, logical block 0, async page read [ 1422.425627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1422.426370] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1422.427755] Buffer I/O error on dev sr0, logical block 1, async page read [ 1422.428877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1422.429685] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1422.430910] Buffer I/O error on dev sr0, logical block 2, async page read [ 1422.432170] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1422.432800] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1422.434023] Buffer I/O error on dev sr0, logical block 3, async page read [ 1422.435099] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1422.435737] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1422.436900] Buffer I/O error on dev sr0, logical block 4, async page read [ 1422.437907] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1422.438525] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1422.439919] Buffer I/O error on dev sr0, logical block 5, async page read [ 1422.440994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1422.441970] blk_update_request: I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1422.443140] Buffer I/O error on dev sr0, logical block 6, async page read [ 1422.446993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1422.447620] blk_update_request: I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1422.448789] Buffer I/O error on dev sr0, logical block 7, async page read 10:39:11 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 10:39:11 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x2b, 0x0, &(0x7f0000000680)) r1 = accept(r0, 0x0, &(0x7f0000000000)) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000030701030000000000000000070000010c00064000000000000000020c000340000000017ffffffe"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:39:11 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffffffffffff, 0x0, 0x0) 10:39:11 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffdffffffffffff, 0x0, 0x0) 10:39:11 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfdef) 10:39:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000480)=ANY=[@ANYBLOB="feff00822db87c3d1ea8d9599eafdb49b36aca6ba79b96f004bd6d0886a18278e6d9821c9f", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c6530002c87af821976942a5ffe872c5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cfba9e02ef30e546553ce5"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="34010000170001000000000000000000fe8800000000000000000000ce4190da000000010000000000000000e0000079ca00000000dfffffffffffffff000000000000000000000000000000fc00"/108, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c7ba67cb7d38793daf5bb8e"], 0x134}}, 0x0) close(0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x1e, 0x8, 0x0, 0x0, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x10002}]}, 0x1c}, 0x1, 0x0, 0x0, 0xb31505c58d61db6b}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f00000000c0)={0x6200, 0x1f, 0x1}) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) fcntl$setown(r1, 0x8, 0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0xd5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) 10:39:11 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) 10:39:11 executing program 5: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40c00) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000080), 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}]}, 0x20}, 0x1, 0x0, 0x0, 0x48850}, 0x4000000) lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000200)=0x8000, 0x4) recvfrom$inet6(r0, &(0x7f0000001700)=""/4099, 0xffffff3e, 0xcd04, 0x0, 0xfffffffffffffed7) syz_emit_ethernet(0x7c6, &(0x7f0000000d80)={@broadcast, @random="7d45eaa9570d", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000400", 0x790, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0x0, [{0x0, 0x1e, "1981b485fdf7b071e30a2f9f34c69569efebd093e595da3b34f8220b117bc0ff2dd0c1111415a1dbf6404d09f1e2a7b9b9f3d649bf1124c5170311592f7728f8eaafd7cd6454f27b622418b8c666a58975aeb11a95549a7b28933aef0aa025c2e7dd1edaa1210325d6929e213179ed582f9c8c6dcb72e666a7152f2260ae6c676efc14bb17f6dd211b6ea51948cf1acb4ca73bffc2f0a1ff532adafda6816b5fa5b330c7709d164449d70ec5418d524bdbfe605783ba1d997b2acecd9079e1132507c842fa65d1ad88909c419edf46dd09e79a328bdd5b72ab027df69520fda9fdcd58030dc346b1e244cd17ea4502d2"}, {0x0, 0x1a, "bf61795a41477d5647ecea992a965848cef742b4839b938215c5132c4d78a09f6ccc3259831447869575315c75123388c0b4b107ad7e6b69fa2143ed22c57771210702932eb95794eee9bad7662c39d10a9b45b750631d528c27b06e52d262db4ffa2f2dda2fc736fa98823ce5911591f2b2978f8c9c08ef04b3c2a236a702c13da6b55f5649fc202ff1dc625ab757fd620a7cae260ec6c60d337478034ef248d6d5e6e77235c00baafbcf948412bade90d26c2668a511b10a2b8e43646d2164f06f5fea765de86d9e2f3baba09c"}, {0x4, 0xb7, "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"}]}}}}}}, 0x0) [ 1435.296387] FAULT_INJECTION: forcing a failure. [ 1435.296387] name failslab, interval 1, probability 0, space 0, times 0 [ 1435.299219] CPU: 0 PID: 9017 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 1435.300768] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1435.302646] Call Trace: [ 1435.303242] dump_stack+0x107/0x167 [ 1435.304064] should_fail.cold+0x5/0xa [ 1435.304934] ? create_object.isra.0+0x3a/0xa20 [ 1435.305965] should_failslab+0x5/0x20 [ 1435.306832] kmem_cache_alloc+0x5b/0x310 [ 1435.307749] create_object.isra.0+0x3a/0xa20 [ 1435.308734] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1435.309897] kmem_cache_alloc_trace+0x151/0x320 [ 1435.310953] ? lock_downgrade+0x6d0/0x6d0 [ 1435.311891] __io_queue_sqe+0x666/0x9d0 [ 1435.312797] ? io_issue_sqe+0x77b0/0x77b0 [ 1435.313738] ? __fget_files+0x2f8/0x520 [ 1435.314641] ? io_prep_rw+0x7f5/0x1050 10:39:11 executing program 7: r0 = openat$incfs(0xffffffffffffffff, &(0x7f00000002c0)='.log\x00', 0x600584, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x400800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0xa8d}}, './file0\x00'}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x400200, 0x0) r6 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r7, 0xbd9e6d4838979bb8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x4d}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="21010000000000000000088c4ddaa151471e4105ec8c2a7468000000080003009ce1ca4b2256fafdca40dd91972de110fbc7729aec4bf709266e12290005d9a4d0a1c1", @ANYRES32=r4, @ANYBLOB="04001780"], 0x20}}, 0x0) connect$netlink(r8, &(0x7f0000000040)=@unspec, 0xc) [ 1435.315526] io_submit_sqes+0x44aa/0x8610 [ 1435.316634] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1435.317771] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1435.318851] ? find_held_lock+0x2c/0x110 [ 1435.319766] ? io_submit_sqes+0x8610/0x8610 [ 1435.320736] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1435.321835] ? wait_for_completion_io+0x270/0x270 [ 1435.322919] ? rcu_read_lock_any_held+0x75/0xa0 [ 1435.323960] ? vfs_write+0x354/0xb10 [ 1435.324794] ? fput_many+0x2f/0x1a0 [ 1435.325619] ? ksys_write+0x1a9/0x260 [ 1435.326492] ? __ia32_sys_read+0xb0/0xb0 [ 1435.327406] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1435.328584] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1435.329755] do_syscall_64+0x33/0x40 [ 1435.330597] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1435.331752] RIP: 0033:0x7f0f01994b19 [ 1435.332590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1435.336718] RSP: 002b:00007f0efef0a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1435.338440] RAX: ffffffffffffffda RBX: 00007f0f01aa7f60 RCX: 00007f0f01994b19 [ 1435.340041] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1435.341827] RBP: 00007f0efef0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1435.343426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1435.345035] R13: 00007ffe18ea049f R14: 00007f0efef0a300 R15: 0000000000022000 10:39:11 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5) 10:39:11 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffdffff, 0x0, 0x0) 10:39:11 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ffffffffffffff, 0x0, 0x0) 10:39:11 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfff5) 10:39:26 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) 10:39:26 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x200000) 10:39:26 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ffffff, 0x0, 0x0) 10:39:26 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 10:39:26 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffffffffffdef, 0x0, 0x0) 10:39:26 executing program 7: io_setup(0x5, &(0x7f0000000000)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8004}) r2 = syz_io_uring_setup(0x4d4c, &(0x7f00000004c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x7ffff000, 0x811) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000000c0)={0x800, 0x0, &(0x7f0000000080)=[r1, r3, r1]}, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fcntl$dupfd(r2, 0x0, r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) io_submit(r0, 0x1, &(0x7f0000000800)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000240)="d0", 0x1, 0x8000}]) 10:39:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1404, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004d00), 0x7ffff000, 0x811) sendfile(r3, r4, &(0x7f0000000140)=0x7fff, 0x8000) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00), 0x7ffff000, 0x811) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000040)=0x182b) 10:39:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x201}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x78, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '-\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000820}, 0x4000884) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000340)) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'cp861'}}]}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r2) [ 1449.662709] FAULT_INJECTION: forcing a failure. [ 1449.662709] name failslab, interval 1, probability 0, space 0, times 0 [ 1449.664259] CPU: 0 PID: 9068 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 1449.665150] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1449.666244] Call Trace: [ 1449.666600] dump_stack+0x107/0x167 [ 1449.667075] should_fail.cold+0x5/0xa [ 1449.667561] ? __io_queue_proc+0x262/0x5a0 [ 1449.668112] should_failslab+0x5/0x20 [ 1449.668596] kmem_cache_alloc_trace+0x55/0x320 [ 1449.669179] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1449.669816] __io_queue_proc+0x262/0x5a0 [ 1449.670335] ? io_poll_queue_proc+0x50/0x50 [ 1449.670880] n_tty_poll+0xc0/0x900 [ 1449.671335] ? n_tty_ioctl+0x370/0x370 [ 1449.671824] tty_poll+0x144/0x1c0 [ 1449.672263] ? tty_release+0xe90/0xe90 [ 1449.672753] __io_arm_poll_handler+0x399/0x9e0 [ 1449.673342] __io_queue_sqe+0x52b/0x9d0 [ 1449.673847] ? io_issue_sqe+0x77b0/0x77b0 [ 1449.674370] ? __fget_files+0x2f8/0x520 [ 1449.674872] ? io_poll_queue_proc+0x50/0x50 [ 1449.675414] ? io_prep_rw+0x7f5/0x1050 [ 1449.675908] io_submit_sqes+0x44aa/0x8610 [ 1449.676445] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1449.677082] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1449.677692] ? find_held_lock+0x2c/0x110 [ 1449.678202] ? io_submit_sqes+0x8610/0x8610 [ 1449.678742] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1449.679351] ? wait_for_completion_io+0x270/0x270 [ 1449.679965] ? rcu_read_lock_any_held+0x75/0xa0 [ 1449.680545] ? vfs_write+0x354/0xb10 [ 1449.681020] ? fput_many+0x2f/0x1a0 [ 1449.681495] ? ksys_write+0x1a9/0x260 [ 1449.681973] ? __ia32_sys_read+0xb0/0xb0 [ 1449.682484] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1449.683141] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1449.683795] do_syscall_64+0x33/0x40 [ 1449.684264] entry_SYSCALL_64_after_hwframe+0x67/0xd1 10:39:26 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffffffffffff5, 0x0, 0x0) [ 1449.684913] RIP: 0033:0x7f0f01994b19 [ 1449.685528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1449.687830] RSP: 002b:00007f0efef0a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1449.688777] RAX: ffffffffffffffda RBX: 00007f0f01aa7f60 RCX: 00007f0f01994b19 [ 1449.689680] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1449.690566] RBP: 00007f0efef0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1449.691462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1449.692361] R13: 00007ffe18ea049f R14: 00007f0efef0a300 R15: 0000000000022000 10:39:26 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffdef, 0x0, 0x0) 10:39:26 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x59, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = getpgrp(0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40800) pidfd_open(r2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000004c0)) 10:39:26 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x400000) 10:39:26 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000) 10:39:26 executing program 7: listen(0xffffffffffffffff, 0x0) r0 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.log\x00', 0x800, 0x82) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x98, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x8}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000800}, 0x8080) copy_file_range(0xffffffffffffffff, &(0x7f00000001c0), 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100", @ANYRES32=r1, @ANYBLOB='\x00'/16]) bind(0xffffffffffffffff, &(0x7f0000000040)=@sco, 0x80) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x48, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}, @nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd=r2}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@remote}]}]}, 0x48}}, 0x0) 10:39:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x3, 0x0, &(0x7f0000000900), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='iocharset=cpZ37,io#Earset=macga']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x20a00, 0x4) 10:39:26 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffff5, 0x0, 0x0) [ 1450.081906] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 1450.083417] CPU: 0 PID: 9105 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 1450.084349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1450.085377] Call Trace: [ 1450.085701] dump_stack+0x107/0x167 [ 1450.086156] sysfs_warn_dup.cold+0x1c/0x29 [ 1450.086673] sysfs_do_create_link_sd+0x122/0x140 [ 1450.087242] sysfs_create_link+0x5f/0xc0 [ 1450.087760] device_add+0x703/0x1c50 [ 1450.088226] ? devlink_add_symlinks+0x970/0x970 [ 1450.088794] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 1450.089453] wiphy_register+0x1da6/0x2850 [ 1450.089969] ? wiphy_unregister+0xb90/0xb90 [ 1450.090502] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1450.091156] ieee80211_register_hw+0x23c5/0x38b0 [ 1450.091733] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 1450.092324] ? net_generic+0xdb/0x2b0 [ 1450.092802] ? lockdep_init_map_type+0x2c7/0x780 [ 1450.093388] ? memset+0x20/0x50 [ 1450.093788] ? __hrtimer_init+0x12c/0x270 [ 1450.094293] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 1450.094908] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 1450.095476] ? hwsim_new_radio_nl+0x967/0x1080 [ 1450.096029] ? memcpy+0x39/0x60 [ 1450.096428] hwsim_new_radio_nl+0x991/0x1080 [ 1450.096967] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1450.097606] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 1450.098406] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1450.099194] genl_family_rcv_msg_doit+0x22d/0x330 [ 1450.099778] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1450.100573] ? cap_capable+0x1cd/0x230 [ 1450.101066] ? ns_capable+0xe2/0x110 [ 1450.101520] genl_rcv_msg+0x36a/0x5a0 [ 1450.101982] ? genl_get_cmd+0x480/0x480 [ 1450.102467] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1450.103098] ? lock_release+0x680/0x680 [ 1450.103590] ? netlink_deliver_tap+0xf4/0xcc0 [ 1450.104134] netlink_rcv_skb+0x14b/0x430 [ 1450.104624] ? genl_get_cmd+0x480/0x480 [ 1450.105112] ? netlink_ack+0xab0/0xab0 [ 1450.105586] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1450.106138] ? is_vmalloc_addr+0x7b/0xb0 [ 1450.106630] genl_rcv+0x24/0x40 [ 1450.107029] netlink_unicast+0x54e/0x800 [ 1450.107528] ? netlink_attachskb+0x870/0x870 [ 1450.108065] netlink_sendmsg+0x90f/0xe00 [ 1450.108559] ? netlink_unicast+0x800/0x800 [ 1450.109085] ? netlink_unicast+0x800/0x800 [ 1450.109598] __sock_sendmsg+0x154/0x190 [ 1450.110078] ____sys_sendmsg+0x70d/0x870 [ 1450.110571] ? sock_write_iter+0x3d0/0x3d0 [ 1450.111081] ? do_recvmmsg+0x6d0/0x6d0 [ 1450.111566] ___sys_sendmsg+0xf3/0x170 [ 1450.112042] ? sendmsg_copy_msghdr+0x160/0x160 [ 1450.112599] ? __fget_files+0x2cf/0x520 [ 1450.113079] ? lock_downgrade+0x6d0/0x6d0 [ 1450.113582] ? clockevents_program_event+0x14b/0x360 [ 1450.114200] ? __fget_files+0x2f8/0x520 [ 1450.114684] ? __fget_light+0xea/0x290 [ 1450.115155] __sys_sendmsg+0xe5/0x1b0 [ 1450.115614] ? __sys_sendmsg_sock+0x40/0x40 [ 1450.116145] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1450.116778] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1450.117410] ? trace_hardirqs_on+0x5b/0x180 [ 1450.117934] do_syscall_64+0x33/0x40 [ 1450.118394] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1450.119029] RIP: 0033:0x7f28518a8b19 [ 1450.119476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1450.121710] RSP: 002b:00007f284ee1e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1450.122626] RAX: ffffffffffffffda RBX: 00007f28519bbf60 RCX: 00007f28518a8b19 [ 1450.123483] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 1450.124351] RBP: 00007f2851902f6d R08: 0000000000000000 R09: 0000000000000000 [ 1450.125218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1450.126076] R13: 00007ffc5bf9fcaf R14: 00007f284ee1e300 R15: 0000000000022000 [ 1450.217236] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 1450.218386] CPU: 0 PID: 9105 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 1450.219249] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1450.220283] Call Trace: [ 1450.220630] dump_stack+0x107/0x167 [ 1450.221107] sysfs_warn_dup.cold+0x1c/0x29 [ 1450.221644] sysfs_do_create_link_sd+0x122/0x140 [ 1450.222407] sysfs_create_link+0x5f/0xc0 [ 1450.222926] device_add+0x703/0x1c50 [ 1450.223415] ? devlink_add_symlinks+0x970/0x970 [ 1450.223999] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 1450.224661] wiphy_register+0x1da6/0x2850 [ 1450.225199] ? wiphy_unregister+0xb90/0xb90 [ 1450.225748] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1450.226411] ieee80211_register_hw+0x23c5/0x38b0 [ 1450.227023] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 1450.227621] ? net_generic+0xdb/0x2b0 [ 1450.228113] ? lockdep_init_map_type+0x2c7/0x780 [ 1450.228730] ? memset+0x20/0x50 [ 1450.229150] ? __hrtimer_init+0x12c/0x270 [ 1450.229666] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 1450.230307] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 1450.230882] ? hwsim_new_radio_nl+0x967/0x1080 [ 1450.231455] ? memcpy+0x39/0x60 [ 1450.231868] hwsim_new_radio_nl+0x991/0x1080 [ 1450.232424] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1450.233094] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 1450.233922] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1450.234749] genl_family_rcv_msg_doit+0x22d/0x330 [ 1450.235366] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1450.236191] ? cap_capable+0x1cd/0x230 [ 1450.236693] ? ns_capable+0xe2/0x110 [ 1450.237168] genl_rcv_msg+0x36a/0x5a0 [ 1450.237657] ? genl_get_cmd+0x480/0x480 [ 1450.238168] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1450.238821] ? lock_release+0x680/0x680 [ 1450.239324] ? netlink_deliver_tap+0xf4/0xcc0 [ 1450.239901] netlink_rcv_skb+0x14b/0x430 [ 1450.240423] ? genl_get_cmd+0x480/0x480 [ 1450.240932] ? netlink_ack+0xab0/0xab0 [ 1450.241453] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1450.242023] ? is_vmalloc_addr+0x7b/0xb0 [ 1450.242541] genl_rcv+0x24/0x40 [ 1450.242960] netlink_unicast+0x54e/0x800 [ 1450.243470] ? netlink_attachskb+0x870/0x870 [ 1450.244043] netlink_sendmsg+0x90f/0xe00 [ 1450.244559] ? netlink_unicast+0x800/0x800 [ 1450.245109] ? netlink_unicast+0x800/0x800 [ 1450.245635] __sock_sendmsg+0x154/0x190 [ 1450.246130] ____sys_sendmsg+0x70d/0x870 [ 1450.246642] ? sock_write_iter+0x3d0/0x3d0 [ 1450.247176] ? do_recvmmsg+0x6d0/0x6d0 [ 1450.247680] ___sys_sendmsg+0xf3/0x170 [ 1450.248163] ? sendmsg_copy_msghdr+0x160/0x160 [ 1450.248724] ? __fget_files+0x2cf/0x520 [ 1450.249220] ? lock_downgrade+0x6d0/0x6d0 [ 1450.249748] ? clockevents_program_event+0x14b/0x360 [ 1450.250381] ? __fget_files+0x2f8/0x520 [ 1450.250887] ? __fget_light+0xea/0x290 [ 1450.251372] __sys_sendmsg+0xe5/0x1b0 [ 1450.251850] ? __sys_sendmsg_sock+0x40/0x40 [ 1450.252410] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1450.253074] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1450.253716] ? trace_hardirqs_on+0x5b/0x180 [ 1450.254260] do_syscall_64+0x33/0x40 [ 1450.254728] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1450.255357] RIP: 0033:0x7f28518a8b19 [ 1450.255824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1450.258110] RSP: 002b:00007f284ee1e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1450.259067] RAX: ffffffffffffffda RBX: 00007f28519bbf60 RCX: 00007f28518a8b19 [ 1450.259971] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 1450.260850] RBP: 00007f2851902f6d R08: 0000000000000000 R09: 0000000000000000 [ 1450.261734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1450.262611] R13: 00007ffc5bf9fcaf R14: 00007f284ee1e300 R15: 0000000000022000 10:39:39 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) 10:39:39 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000301010000000002000000240001801400018008000100ffffffff08000200e000560862c45e07e1b6b200010c0002800500010000000000"], 0x38}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x1, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4881}, 0x20004000) r1 = syz_open_dev$vcsu(&(0x7f0000000640), 0xfffffffffffffff8, 0x10000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000006c0)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000700)={0x0, @empty, @private}, &(0x7f0000000740)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000880)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000140)={@ipv4, 0x0, r8}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000bc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b80)={&(0x7f0000000940)={0x20c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) 10:39:39 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeffd) 10:39:39 executing program 4: io_submit(0x0, 0x2, &(0x7f0000001680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x4, 0x0}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x28}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x78, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x78}}, 0x40800) open_tree(r0, &(0x7f0000000000)='./file0\x00', 0x1001) 10:39:39 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000000000, 0x0, 0x0) 10:39:39 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) 10:39:39 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffffffffffff, 0x0, 0x0) 10:39:39 executing program 5: preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xcb, 0x0, 0x0, 0x4307, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x4c20, 0x0, 0xc00}, 0x0, 0xa, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x400400, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(r1, 0x5396, &(0x7f0000000140)={0x1, 0x1}) write(r0, &(0x7f0000000080)="1f", 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0xfdef, 0x0) [ 1463.035080] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1463.043626] FAULT_INJECTION: forcing a failure. [ 1463.043626] name failslab, interval 1, probability 0, space 0, times 0 [ 1463.045194] CPU: 0 PID: 9126 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 1463.046080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1463.047170] Call Trace: [ 1463.047640] dump_stack+0x107/0x167 [ 1463.048150] should_fail.cold+0x5/0xa [ 1463.048652] ? create_object.isra.0+0x3a/0xa20 [ 1463.049269] should_failslab+0x5/0x20 [ 1463.049770] kmem_cache_alloc+0x5b/0x310 [ 1463.050313] create_object.isra.0+0x3a/0xa20 [ 1463.050886] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1463.051575] kmem_cache_alloc_trace+0x151/0x320 [ 1463.052194] __io_queue_proc+0x262/0x5a0 [ 1463.052730] ? io_poll_queue_proc+0x50/0x50 [ 1463.053316] n_tty_poll+0xc0/0x900 [ 1463.053781] ? n_tty_ioctl+0x370/0x370 [ 1463.054289] tty_poll+0x144/0x1c0 [ 1463.054759] ? tty_release+0xe90/0xe90 [ 1463.055276] __io_arm_poll_handler+0x399/0x9e0 [ 1463.055879] __io_queue_sqe+0x52b/0x9d0 [ 1463.056402] ? io_issue_sqe+0x77b0/0x77b0 [ 1463.056943] ? __fget_files+0x2f8/0x520 [ 1463.057467] ? io_poll_queue_proc+0x50/0x50 [ 1463.058035] ? io_prep_rw+0x7f5/0x1050 [ 1463.058560] io_submit_sqes+0x44aa/0x8610 [ 1463.059133] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1463.059795] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1463.060447] ? find_held_lock+0x2c/0x110 [ 1463.060988] ? io_submit_sqes+0x8610/0x8610 [ 1463.061564] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1463.062201] ? wait_for_completion_io+0x270/0x270 [ 1463.062836] ? rcu_read_lock_any_held+0x75/0xa0 [ 1463.063444] ? vfs_write+0x354/0xb10 [ 1463.063931] ? fput_many+0x2f/0x1a0 [ 1463.064403] ? ksys_write+0x1a9/0x260 [ 1463.064913] ? __ia32_sys_read+0xb0/0xb0 [ 1463.065447] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1463.066136] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1463.066817] do_syscall_64+0x33/0x40 [ 1463.067302] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1463.067971] RIP: 0033:0x7f0f01994b19 [ 1463.068456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1463.070847] RSP: 002b:00007f0efef0a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1463.071833] RAX: ffffffffffffffda RBX: 00007f0f01aa7f60 RCX: 00007f0f01994b19 [ 1463.072788] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1463.073728] RBP: 00007f0efef0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1463.074653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1463.075579] R13: 00007ffe18ea049f R14: 00007f0efef0a300 R15: 0000000000022000 10:39:39 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5) 10:39:39 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeffdffff) 10:39:39 executing program 5: r0 = gettid() timer_create(0x7, &(0x7f0000000080)={0x0, 0xb, 0x4, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 1463.210227] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.7'. 10:39:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000), 0x8) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x1a6) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) close(r2) flistxattr(r4, &(0x7f00000001c0)=""/176, 0xb0) creat(&(0x7f0000000280)='./file1\x00', 0x25) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r3, 0x0, &(0x7f00000002c0)="9cab9ee5ecd1a2988991e87872621d6c93e29f022422efaf3829420d1e6b7f1a2f52742a075d3d31a6ee02823efe3a86ddf16506773cc33ad8c720cbd44e211c9c6066ab6c7670f0285ededb7da65028a308722100decf0b8c2383e41492d75ba01e2d7413df778a7d1a2dd98edef2af79627f608ade3fb072db03fffc4b6aea570f7b6b32251e8b7f6fb0e6edeae6911e95c1792d2635f6c4daee912823ba213e5b543d4ec2af75ecf24ccb1abd159cf4bc3e8d9fe773f485e9a0802d5122fb50d44c25a94bdf72c0fbded02734bf7dd86f8c5ba52e", 0xd6, 0x20000040}, 0x1f) 10:39:39 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5ff) 10:39:39 executing program 7: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) setfsgid(0xee01) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.sched_load_balance\x00', 0x2, 0x0) sendfile(r0, r2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x10}, 0x6) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) lremovexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.id\x00') syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) setresuid(0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000003c0), 0x984800, &(0x7f0000000680)=ANY=[@ANYBLOB="7472616e733d756e697d2c616e616d653d2c66756e633d43524544535f434845434b2c7375626a5f726f6c659be8aedae08cc2af4d00ef07e243704f6986bad96a1e1e20c4c61b00b43af6602863040f1e2eb6cd5fbe61a2cf114da74467e96a2e92cc2c49c23a1a99122bd5657c78e702e3dcb9cff5cfaa1a1386222e9eca966f3869ccc0e955c2791eba6b4266149892e9be0000d24629e2a358fe6af1f70370b7d5a33e331eba9f848b4aed9125174a1732badce3", @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=0x0, @ANYBLOB=',mask=^MAY_EXEC,fsname=(-],uid<', @ANYRESDEC=0x0, @ANYBLOB=',func=KEXEC_KERNEL_CHECK,obj_role=,smackfshat=cgroup2\x00,\x00']) open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) 10:39:39 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x40000000000000, 0x0, 0x0) 10:39:39 executing program 5: setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x3) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="64656275675f77616e745f65787472615f6973697a653d3078303030303030303030303030303030302c0088675c8b7e285d7cc6c8e856922e8bb8f55b13927b2d48dc1bd545c29a5fba8cb79b90a87078af313c28d41f8c2f0bf381917842746e824dd5a8d596142f5a7d1ea9f88a46ac17b3ccac73596477a758"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x13b2a2, 0xf4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x118, &(0x7f0000000040)=0x1, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x81) 10:39:39 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 10:39:39 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5ffffff) 10:39:52 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000) 10:39:52 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) 10:39:52 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000000000000}, 0x0, 0x0, 0x6, 0x7, 0x0, 0xfffffffd, 0x4000, 0x0, 0x0, 0x0, 0x4c01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="13f99a000800008809", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./nile0f']) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000280)={0x0, &(0x7f0000000240)}) preadv(r2, &(0x7f0000000b80), 0x0, 0x3f, 0x6) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240001000000010000000600000000960000090005000000f40000006a666ca4a8f5e59065ad8855c0df8ada142f0dfa1768d9360e3bc06149226b84a01fa1b977d66ab5a50d3962f76f9f914bab0f70f67515dab6"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) openat$sr(0xffffffffffffff9c, &(0x7f0000000c40), 0x30a00, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) r6 = signalfd(r5, &(0x7f00000003c0)={[0x1]}, 0x8) fcntl$setstatus(r6, 0x4, 0x46800) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r7, 0x0, 0x0, 0x1000002) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f00000005c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:39:52 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfdef) 10:39:52 executing program 4: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x80071, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_complete(r0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000004c0)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r2, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000240)=""/25, 0x19}, {&(0x7f0000000280)=""/143, 0x8f}], 0x5, &(0x7f00000003c0)=""/148, 0x94}, 0x0, 0x40000023, 0x0, {0x3, r3}}, 0x6) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 10:39:52 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r1, r0, 0x0) fcntl$addseals(r1, 0x409, 0x8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000440)=0x7, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd_index=0x3, 0x8, &(0x7f0000000140)="ef3003e7d4d5730dd9bc0d2116cbd2ec2d4cef0397c67262d0882d05da47c1147ab3a8e1b3dfac797791d00529f0be39c7c3024d4751fcbfb4d3ec4b7b6dc1", 0x3f, 0xc, 0x1}, 0x9) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='\x00', r3) futimesat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={{0x77359400}, {0x0, 0x2710}}) r5 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000540)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d084839f846dca8739131e4a9c45c6509af44529537eae3b5a4793a9a0aacfd7a75f2b566b874939829b82a35d20d1985a92c5d7ba971251e89286f64438db33a7f05fb0d1707fd3fa27a56032a79c1d09558fbbfcb2e5f36d3e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d11c08a14918b01d07c92179dfae1ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe25748c55d23902439133eecfafb2e0f", 0xd4, 0xfffffffffffffffa) add_key(0x0, 0x0, 0x0, 0x0, r5) add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r4) syz_open_procfs(0x0, 0x0) unshare(0x48020200) 10:39:52 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) 10:39:52 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffdef) [ 1476.315589] FAULT_INJECTION: forcing a failure. [ 1476.315589] name failslab, interval 1, probability 0, space 0, times 0 [ 1476.318441] CPU: 1 PID: 9199 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 1476.319949] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1476.321747] Call Trace: [ 1476.322314] dump_stack+0x107/0x167 [ 1476.323105] should_fail.cold+0x5/0xa [ 1476.323927] ? io_setup_async_rw+0x180/0x580 [ 1476.324873] should_failslab+0x5/0x20 [ 1476.325692] __kmalloc+0x72/0x390 [ 1476.326440] io_setup_async_rw+0x180/0x580 [ 1476.327352] io_read+0xe98/0x11e0 [ 1476.328123] ? find_held_lock+0x2c/0x110 [ 1476.329113] ? kiocb_done+0xc90/0xc90 [ 1476.330115] ? mark_lock+0xf5/0x2df0 [ 1476.330921] ? lock_downgrade+0x6d0/0x6d0 [ 1476.331816] ? lock_chain_count+0x20/0x20 [ 1476.332732] ? queue_delayed_work_on+0xe0/0xe0 [ 1476.333737] ? __lock_acquire+0xbb1/0x5b00 [ 1476.334652] io_issue_sqe+0x2e8a/0x77b0 [ 1476.335510] ? find_held_lock+0x2c/0x110 [ 1476.336374] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1476.337484] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1476.338500] ? lock_downgrade+0x6d0/0x6d0 [ 1476.339371] ? io_connect+0x610/0x610 [ 1476.340178] ? lock_acquire+0x197/0x470 [ 1476.341028] ? find_held_lock+0x2c/0x110 [ 1476.341890] ? __fget_files+0x2cf/0x520 [ 1476.342727] ? lock_downgrade+0x6d0/0x6d0 [ 1476.343611] __io_queue_sqe+0x90/0x9d0 [ 1476.344446] ? io_issue_sqe+0x77b0/0x77b0 [ 1476.345327] ? __fget_files+0x2f8/0x520 [ 1476.346182] ? io_prep_rw+0x7f5/0x1050 [ 1476.347011] io_submit_sqes+0x44aa/0x8610 [ 1476.347927] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1476.348994] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1476.350019] ? find_held_lock+0x2c/0x110 [ 1476.350884] ? io_submit_sqes+0x8610/0x8610 [ 1476.351802] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1476.352816] ? wait_for_completion_io+0x270/0x270 [ 1476.353859] ? rcu_read_lock_any_held+0x75/0xa0 [ 1476.354842] ? vfs_write+0x354/0xb10 [ 1476.355638] ? fput_many+0x2f/0x1a0 [ 1476.356406] ? ksys_write+0x1a9/0x260 [ 1476.357236] ? __ia32_sys_read+0xb0/0xb0 [ 1476.358104] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1476.359207] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1476.360299] do_syscall_64+0x33/0x40 [ 1476.361079] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1476.362182] RIP: 0033:0x7f0f01994b19 [ 1476.362961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1476.366873] RSP: 002b:00007f0efef0a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1476.368472] RAX: ffffffffffffffda RBX: 00007f0f01aa7f60 RCX: 00007f0f01994b19 [ 1476.369980] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1476.371487] RBP: 00007f0efef0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1476.372990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1476.374530] R13: 00007ffe18ea049f R14: 00007f0efef0a300 R15: 0000000000022000 10:39:52 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeffd) 10:39:52 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffff5) [ 1476.390137] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:52 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = perf_event_open(&(0x7f0000000a00)={0x3, 0x80, 0x70, 0x0, 0x20, 0x0, 0x0, 0xe9a, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40086607, &(0x7f0000000080)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/suspend_stats', 0x11b800, 0x40) pread64(r4, &(0x7f0000000180)=""/112, 0x70, 0x4) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) request_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='\x00', 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x2c00) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) connect$unix(r5, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 10:39:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) pwritev2(r1, &(0x7f00000003c0)=[{&(0x7f0000000340)='t', 0x1}], 0x1, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x28, r4, 0x1, 0x0, 0x1800, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r4, 0x301, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8804) r5 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0xe8, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x24008080) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000001180)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001140)={&(0x7f0000001200)=ANY=[@ANYBLOB="7c050000", @ANYRES16=r4, @ANYBLOB="00080003000000000000000000000000000041a0303813b2d9a1ec67", @ANYRES32=r6, @ANYBLOB="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"], 0x57c}, 0x1, 0x0, 0x0, 0x84}, 0x84) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r4, 0x0, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x2fd}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x3]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x122a}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}]]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4040080) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001d00210c0000000000000000040002000c0017fe5800150008000000"], 0x20}}, 0x0) [ 1476.692486] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.5'. 10:40:07 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffdffffffffffff, 0x0, 0x0) 10:40:07 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000000000) 10:40:07 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfff5) 10:40:07 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) 10:40:07 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5ff) 10:40:07 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x9c20, 0x0, 0x4, 0x1ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x80, 0x4, 0x4, 0x80, 0xad, 0x0, 0xba3, 0x2a00, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x79}, 0x42000, 0x3, 0x2, 0x3, 0xf4b, 0x0, 0x1f, 0x0, 0x1774, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x20, 0x0, 0x101, 0x0, 0x0, {}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x20}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000044580)={0x0, 0x0, "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", "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"}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0, 0x2203, 0x0, {0x1}}, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)) setresuid(0xffffffffffffffff, 0x0, 0x0) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x1}, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x1e, 0xc21, 0x0, 0x0, {0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:40:07 executing program 5: r0 = perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffc0000000002, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x80, 0x6, 0x6, 0x7, 0x0, 0x7562, 0x42008, 0xb, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x43, 0x4, @perf_config_ext={0x3f, 0x20}, 0x12280, 0x1, 0xfc, 0x5, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xd, r0, 0x11) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) syz_io_uring_setup(0x8003a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x80) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:40:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000480)=ANY=[@ANYBLOB="feff00822db87c3d1ea8d9599eafdb49b36aca6ba79b96f004bd6d0886a18278e6d9821c9f", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c6530002c87af821976942a5ffe872c5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cfba9e02ef30e546553ce5"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r2 = openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r3 = creat(&(0x7f0000000000)='./file2\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000016c0)=ANY=[@ANYBLOB="34010000170001000000000000000000fe8800000000000000000000ce4190da000000010000000000000000e000000100000000000000000000000000000000000000000000000000000000fc00"/108, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT, @ANYBLOB="c18b481a66e4c48b9b9e45420e7b5ba3d1385be8ba2213d82b3f69d4110d9d59dea8b470f15eaef9a01d23381b883da819f2b828fa542fd508153cc4ce6e1f327ab71c2c6bc5083a6c1b52f484dc7fd83cce383253e6108d7b57bfe0de6dc9b5f57ae8700574d3f30867bb6c479d96b49c37649037c93a410e26c6b0623c8da63260523f6643", @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b708000000000000000000000000000000000000000000000c7ba67cb7d38793daf5bb8e"], 0x134}}, 0x10) close(r3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x1e, 0x8, 0x0, 0x0, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x10002}]}, 0x1c}, 0x1, 0x0, 0x0, 0xb31505c58d61db6b}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f00000000c0)={0x6200, 0x1f, 0x1}) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000180)) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) ftruncate(0xffffffffffffffff, 0xd5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000500)={{r3}, "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"}) [ 1490.807226] FAULT_INJECTION: forcing a failure. [ 1490.807226] name failslab, interval 1, probability 0, space 0, times 0 [ 1490.810048] CPU: 0 PID: 9251 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 1490.810406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9252 comm=syz-executor.7 [ 1490.811593] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1490.811601] Call Trace: [ 1490.811627] dump_stack+0x107/0x167 [ 1490.811647] should_fail.cold+0x5/0xa [ 1490.811668] ? create_object.isra.0+0x3a/0xa20 [ 1490.811690] should_failslab+0x5/0x20 [ 1490.811716] kmem_cache_alloc+0x5b/0x310 [ 1490.820987] create_object.isra.0+0x3a/0xa20 [ 1490.821993] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1490.823166] __kmalloc+0x16e/0x390 [ 1490.823980] io_setup_async_rw+0x180/0x580 [ 1490.824946] io_read+0xe98/0x11e0 [ 1490.825751] ? find_held_lock+0x2c/0x110 [ 1490.826679] ? kiocb_done+0xc90/0xc90 [ 1490.827544] ? mark_lock+0xf5/0x2df0 [ 1490.828395] ? lock_downgrade+0x6d0/0x6d0 [ 1490.829344] ? lock_chain_count+0x20/0x20 [ 1490.830315] ? queue_delayed_work_on+0xe0/0xe0 [ 1490.831370] ? __lock_acquire+0xbb1/0x5b00 [ 1490.832330] io_issue_sqe+0x2e8a/0x77b0 [ 1490.833246] ? find_held_lock+0x2c/0x110 [ 1490.834185] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1490.835378] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1490.836452] ? lock_downgrade+0x6d0/0x6d0 [ 1490.837406] ? io_connect+0x610/0x610 [ 1490.838286] ? lock_acquire+0x197/0x470 [ 1490.839190] ? find_held_lock+0x2c/0x110 [ 1490.840114] ? __fget_files+0x2cf/0x520 [ 1490.841014] ? lock_downgrade+0x6d0/0x6d0 [ 1490.841972] __io_queue_sqe+0x90/0x9d0 [ 1490.842864] ? io_issue_sqe+0x77b0/0x77b0 [ 1490.843799] ? __fget_files+0x2f8/0x520 [ 1490.844701] ? io_prep_rw+0x7f5/0x1050 [ 1490.845604] io_submit_sqes+0x44aa/0x8610 [ 1490.846569] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1490.847699] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1490.848797] ? find_held_lock+0x2c/0x110 [ 1490.849727] ? io_submit_sqes+0x8610/0x8610 [ 1490.850707] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1490.851800] ? wait_for_completion_io+0x270/0x270 [ 1490.852895] ? rcu_read_lock_any_held+0x75/0xa0 [ 1490.853964] ? vfs_write+0x354/0xb10 [ 1490.854808] ? fput_many+0x2f/0x1a0 [ 1490.855636] ? ksys_write+0x1a9/0x260 [ 1490.856509] ? __ia32_sys_read+0xb0/0xb0 [ 1490.857444] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1490.858635] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1490.859806] do_syscall_64+0x33/0x40 [ 1490.860653] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1490.861828] RIP: 0033:0x7f0f01994b19 [ 1490.862675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1490.866866] RSP: 002b:00007f0efef0a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1490.868601] RAX: ffffffffffffffda RBX: 00007f0f01aa7f60 RCX: 00007f0f01994b19 [ 1490.870242] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1490.871861] RBP: 00007f0efef0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1490.873483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1490.875100] R13: 00007ffe18ea049f R14: 00007f0efef0a300 R15: 0000000000022000 [ 1490.902731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9252 comm=syz-executor.7 10:40:07 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ffffffffffffff, 0x0, 0x0) 10:40:07 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff6000/0x3000)=nil) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) r3 = gettid() pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xf9ffffff}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x8, 0x0, 0x0, 0x4, 0x10010, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x9e, 0x8}, 0x11a4, 0x1, 0x6, 0x9, 0xc1dd, 0xa30, 0x8, 0x0, 0x9}, r4, 0xf, r0, 0x0) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) 10:40:07 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfdef) 10:40:07 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000000000) 10:40:07 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x200000) 10:40:07 executing program 4: ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)=ANY=[@ANYBLOB="010000000100000070feffff", @ANYRES32, @ANYRES32=r1, @ANYBLOB="6c6530000000000000000000cb3445255339f45881c255e63f50e34809d7c5ead210cd06de6e5298d99e239850c0ccc82e8e80808dad9eab9da9fddd464b6ae6a361ac036d1ef970ff7d95f9d80221ccaf766e"]) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000580)={0xfffffffffffffffd, 0x6, 0x200, 0xfff}) perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4307, 0xeca88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000100), 0x6d7cf708bc065162}, 0x21a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, r0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)=@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65}, 0x8) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r3, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(r3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom1\x00', 0x0, 0x0) syz_io_uring_setup(0x4d4c, &(0x7f00000004c0)={0x0, 0xf0f1, 0x0, 0x0, 0x118}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000540)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, &(0x7f0000000380)=0x80, &(0x7f00000004c0)=@x25={0x9, @remote}, 0x0, 0x80000, 0x1}, 0x10001) ioctl$BLKROGET(r3, 0x125e, &(0x7f00000000c0)) r6 = syz_open_dev$mouse(&(0x7f0000000180), 0x8, 0x400182) write$binfmt_elf64(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460006097a00000100000000000200050006000000dd010000000000004000000000000000550300000000000000000000620b38000200018000000200050000000c3d000000000000000000000000000000000000020000000000000008000000000000008c00000000000000020000000000000006000000fbffffff9c0e000000000000fffbffffffffffff0700000000000000ca10000000000000e1c50000000000000700000000000000db588214a5308976afaf6722472745f2de4b2a7ff197ef34629c5f593c3f53cd73d784ddd3d302c376ccd308f96df8cbe4bebfe719e998a7fe2be66752f94476596e2bcc229b37c734d40af5806fdd11b54bc84ad5bbbeaa86163d1d13b7f842efe667ec3d7fd7d61c0690b8c43ed5c7a8405de0fe8b7f3ea2bae1adb1e7358e83af0846bfb43f92496ef9e90026bece4d08fef285ad164baee8c91535a871968926a8f1a8a519eea0ee64970c96a1c8abe0e024b77ab05e7a08794a4ab397df4a0c5e698deaca38faebe44fc2af6ca7665367b7f0e87d8cdf5a2e0390bc6f0d8d1cf8c040ec12e2830851922c84be95bbac"], 0x1ab) ioctl$BLKROGET(r3, 0x125e, &(0x7f00000005c0)) 10:40:07 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffffffffffdef, 0x0, 0x0) 10:40:21 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) 10:40:21 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x2, 0x0, 0x0, 0xfd, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x80000000}, 0x0, 0x80000, 0x0, 0x4, 0xff, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r1, 0x5327, &(0x7f0000000440)=@disckey={0x2, 0x0, "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"}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000280)=@v2={0x2, @aes128, 0x2, '\x00', @d}) write$hidraw(r1, &(0x7f0000000240), 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x12, 0x1, @tid=r2}, &(0x7f0000000340)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000240)={{}, {0x0, 0x989680}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="45eceaf0489d7f79fba0b6bef56b41000000000000"], 0x14}}, 0x0) read(r4, &(0x7f0000000080)=""/65, 0x41) timer_settime(0x0, 0x0, &(0x7f0000000380)={{}, {0x77359400}}, 0x0) timer_gettime(r3, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:40:21 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3f}, 0x1c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='t,rfdno=\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESOCT]) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) dup2(r2, r1) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0x532, @none, 0x6, 0x1}, 0xe) 10:40:21 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x400000) 10:40:21 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfff5) 10:40:21 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffffffffffff5, 0x0, 0x0) 10:40:21 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 10:40:21 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x8000, 0x0) pwritev2(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)='t', 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) openat(r2, &(0x7f0000000140)='./file1\x00', 0x2000, 0x4) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r3, 0x301, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8804) r4 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000001180)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001140)={&(0x7f0000001200)=ANY=[@ANYBLOB="7c050000", @ANYRES16=r3, @ANYBLOB="00080003000000000000000000000000000041a0303813b2d9a1ec67", @ANYRES32=r5, @ANYBLOB="0a000600080211000001000014003300e4000100080211000000c9f463ed293c0a000600080211000001000034053300883b0000ffffffffffff080211000001ffffffffffff0500ffffffffffff6606f811200060920546b5f90802110000005050505050503800a201d87f6788c349b91c3dbf7ab2163de5375ef4e36ea2f633216c4b7d592e624a728ca89ee7ce8363bc5abab476bfe38e6c810f84361a81e097f082be4421ba1aad850d944552a078718cf05a9e9a0a2f10b1e0479b19f040d5800acd7c99df9d41076d6191bab5ad8bed54bb3d46655a095a8e68d5d0ac86b934ff171856a42d3e05a6d60d24527261e53f272def18cafdc0ac40c2346a89dc7f7cc6b06d45c085d88f8f2e8f623f1dcd839e6b1e353069ac5305f65c5a77f184d60b3a216dfab079b3d70f7afd00781e2aa452829bfa62714d9a23e23d43a1900f457bec8f0b4b8cbfe108ad8c1f1de0b6ca822d695ac44a24496204ac07a5056e8049074505b4e25c6afb5db4934888553e0e348a8076568fd6ded6518e18a1808eaba2fcd8ee2cdea1b4d6f3d55f619852b234e114119b558fd5cb8f3ac59286cd8406be2ad38c7e5dd501ca4a2d017f72da00fc7924a95968ceb7407df472efa8c52305550edd053fde062d7a90e0b19d4dfe1ed80c598829b8a18f14551320b165a3536579441fddb5f3b7588a4951e97aafeefceb1dbfc56ef6c7f5db882c9608c978516f357323af62356a374e2d5380a894d11ff860a8b9a6707809113170c7a8b9f2d587727bf9954edfe9442ddd940fc8e8aab0a9ce1512bd647368464c1a4408394ba5930c5e8028500eb7b4110b126ae2adb407f32b4afe5eeec32c2e465cf330d165cf9dcddb4fad1cd0a82b2b24ad3d3a15dd11c47660b75ec0b21c7bbe4e0544cd84fde590bc47c086b09dcf207516620b8c71a6fb8beca65b536656e198b3de90f53d3352db86d7b8dbdbd2f3f290e8e0f0a4d97e44bde62a364e978913cd52a310e22c18705cbab3eca1be02083db302c173e1d43a4ee7db5e0accb0489164b4f770f83b054b6e0fc796714832c0e689c856f736d34f490c08950b35c99b81f8b205170e6e3882cbe2ca3013f98802507d0f3d9fa20beb411baaed6046d6d98c5af1636f54fc665dcc6eb62d02c34d64f0474ba51c0813e85c4633393c07ed5187b7f267841e4ab38f743c330f05f9f8e55541c90a04cf8a7d657f51d2efba3c4436838e891b2c7161984d7b8c5ddc246ac5f928524031f3dbe24d991e5eb6eeecec8cc177d9d58865059e16b8b1769168a7df22d35dd8cfcb2b8a5f2cc1a221ed951f321aa8cd5d26d693c03c5dfe03d95841df5a808c463824e218f8a773444aeb028e118c453b694482220a8923e279efb87ea689fe3b429843bbdaf76992a37549d4aa99b07f2e103fadc5592cba44cd3c8775cbdef4dc4b9c2f73064c64e69d57c2810150c87fe29508aeed45db6180bc578c63aa7173a8ee35680766078f5c166a1933eb9cde69a80c38523062b61293f384a910870f321209927b076d41a53b03fea65164d2d7f522352824ad16f5adb95d5fa6764a983eb4857f3b6d1b94b776334152fddefe0d1323f1e81ae5fedcf407922d5de12940076e62e44ea0645a48083b855fd070f11581c90e60bc02fe4926eb411cd4804aa65004560a9ec6280773e2148de0d73df441d976aa1518df1d91086bfa8c6c3387f00dc2cda1a733918c765134716449905532bd51560f616346704df857e403d1274e56a8df5f7f75c5670fafd912b9b9d23d03f6034a71d4c151f504e685f2d861a3ea21f7771f170d4d83b9d0af3f8fc05be63d09c01c9b80672b8717166ca9d5019156bd8d982db44617971332abf6721c09277b703050b9010f49a6aa1af19d9d0728d3ae4e993ff3b9d71d807b44c97804cfc338dc0f53"], 0x57c}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = dup(r7) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, r3, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5b70, 0x5c}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x38}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x14}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x42}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x34}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}]}, 0x78}}, 0x20040044) socket$inet6(0xa, 0xa, 0x5) 10:40:21 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffffffffffff, 0x0, 0x0) [ 1504.746540] FAULT_INJECTION: forcing a failure. [ 1504.746540] name failslab, interval 1, probability 0, space 0, times 0 [ 1504.749368] CPU: 1 PID: 9318 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 1504.751088] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1504.753162] Call Trace: [ 1504.753818] dump_stack+0x107/0x167 [ 1504.754800] should_fail.cold+0x5/0xa [ 1504.755710] ? __io_queue_sqe+0x666/0x9d0 [ 1504.756810] should_failslab+0x5/0x20 [ 1504.757781] kmem_cache_alloc_trace+0x55/0x320 [ 1504.758984] ? lock_downgrade+0x6d0/0x6d0 [ 1504.759966] __io_queue_sqe+0x666/0x9d0 [ 1504.760979] ? io_issue_sqe+0x77b0/0x77b0 [ 1504.762020] ? __fget_files+0x2f8/0x520 [ 1504.762993] ? io_prep_rw+0x7f5/0x1050 [ 1504.763897] io_submit_sqes+0x44aa/0x8610 [ 1504.764981] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1504.766185] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1504.767311] ? find_held_lock+0x2c/0x110 [ 1504.768410] ? io_submit_sqes+0x8610/0x8610 [ 1504.769305] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1504.770494] ? wait_for_completion_io+0x270/0x270 [ 1504.771695] ? rcu_read_lock_any_held+0x75/0xa0 [ 1504.772669] ? vfs_write+0x354/0xb10 [ 1504.773464] ? fput_many+0x2f/0x1a0 [ 1504.774228] ? ksys_write+0x1a9/0x260 [ 1504.775009] ? __ia32_sys_read+0xb0/0xb0 [ 1504.775868] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1504.776971] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1504.778071] do_syscall_64+0x33/0x40 [ 1504.778856] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1504.779942] RIP: 0033:0x7f0f01994b19 [ 1504.780731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1504.784526] RSP: 002b:00007f0efef0a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1504.786127] RAX: ffffffffffffffda RBX: 00007f0f01aa7f60 RCX: 00007f0f01994b19 [ 1504.787636] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1504.789133] RBP: 00007f0efef0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1504.790639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 10:40:21 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) [ 1504.792149] R13: 00007ffe18ea049f R14: 00007f0efef0a300 R15: 0000000000022000 10:40:21 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5) 10:40:21 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x1ea) pwrite64(r2, &(0x7f00000001c0)="c1fce0ee05e197e8e495d3c1d57e08a03489ff609063fe60d910e1a1e03f1d098d232cc25b76a01543945a1f4b736c0aee0692835421290adc7dc8ffccc943268ff68678b6a351d416a4e403224f49173eebbe02352bf6ec67d55c60d1358aa7b433c0ccd49a0234bb6cc61807bb56b7b2f6558ac3305e5694dda442df2c17fb4119af01e5e2a5f937c9141167c4759c56778ae3c18c526d57abfe751013d1122f52c1e1ab03adb5d72463f4074f414fbf5844b492577e4b506486493182c74f7242068b146c", 0xc6, 0x180) ftruncate(r1, 0x2) write$tun(r1, &(0x7f0000000000)={@val={0x0, 0x1c}, @val={0x0, 0x80, 0x22, 0x2, 0x3f, 0x7}, @x25={0x0, 0x7, 0x17, "5fc0bb600bf41603d7474c3e8c5acf3e25aa620b6ba0fda127397e0edc0a563f65db0c23ef6e0a59ccb17f45118fc26dc1f26e065f3d456c62fb7dd27ab7"}}, 0x4f) waitid(0x0, 0x0, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) 10:40:21 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeffdffffffffffff) 10:40:21 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x200000) 10:40:21 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeffdffff) 10:40:21 executing program 4: ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) r2 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x8000, 0x62) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x7ffff000, 0x811) fcntl$addseals(r1, 0x409, 0xd) fallocate(r0, 0x3, 0x0, 0x8800000) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x76, 0x2) 10:40:21 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) 10:40:21 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 10:40:21 executing program 5: sysfs$3(0x3) syz_io_uring_setup(0x46bd, &(0x7f0000000ac0)={0x0, 0x0, 0x2, 0x0, 0x10d}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) 10:40:21 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5ffffffffffffff) [ 1505.394355] FAULT_INJECTION: forcing a failure. [ 1505.394355] name failslab, interval 1, probability 0, space 0, times 0 [ 1505.396921] CPU: 1 PID: 9372 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 1505.398572] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1505.400329] Call Trace: [ 1505.401028] dump_stack+0x107/0x167 [ 1505.401946] should_fail.cold+0x5/0xa [ 1505.402757] ? create_object.isra.0+0x3a/0xa20 [ 1505.403720] should_failslab+0x5/0x20 [ 1505.404625] kmem_cache_alloc+0x5b/0x310 [ 1505.405652] create_object.isra.0+0x3a/0xa20 [ 1505.406618] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1505.407690] kmem_cache_alloc_trace+0x151/0x320 [ 1505.408661] ? lock_downgrade+0x6d0/0x6d0 [ 1505.409544] __io_queue_sqe+0x666/0x9d0 [ 1505.410385] ? io_issue_sqe+0x77b0/0x77b0 [ 1505.411261] ? __fget_files+0x2f8/0x520 [ 1505.412100] ? io_prep_rw+0x7f5/0x1050 [ 1505.412927] io_submit_sqes+0x44aa/0x8610 [ 1505.413939] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1505.415234] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1505.416251] ? find_held_lock+0x2c/0x110 [ 1505.417110] ? io_submit_sqes+0x8610/0x8610 [ 1505.418147] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1505.419371] ? wait_for_completion_io+0x270/0x270 [ 1505.420355] ? rcu_read_lock_any_held+0x75/0xa0 [ 1505.421331] ? vfs_write+0x354/0xb10 [ 1505.422142] ? fput_many+0x2f/0x1a0 [ 1505.422918] ? ksys_write+0x1a9/0x260 [ 1505.423726] ? __ia32_sys_read+0xb0/0xb0 [ 1505.424709] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1505.425977] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1505.427067] do_syscall_64+0x33/0x40 [ 1505.427849] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1505.429119] RIP: 0033:0x7f0f01994b19 [ 1505.430065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1505.434251] RSP: 002b:00007f0efef0a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1505.435856] RAX: ffffffffffffffda RBX: 00007f0f01aa7f60 RCX: 00007f0f01994b19 [ 1505.437353] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1505.439178] RBP: 00007f0efef0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1505.440678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1505.442187] R13: 00007ffe18ea049f R14: 00007f0efef0a300 R15: 0000000000022000 10:40:34 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) 10:40:34 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5ffffff) 10:40:34 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000) 10:40:34 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x61b8, 0x0, 0x3, 0x0, 0x13, 0xfffffffd, 0xb419}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0x4) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380)={0x100, 0x137, 0x10}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) openat(r3, &(0x7f00000003c0)='./file1/file0\x00', 0x80000, 0x2) r4 = openat(r2, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a0011cd"], 0x1c}, 0x1, 0x0, 0x0, 0x4004804}, 0x20000854) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000180)=""/43, 0x2b}], 0x1) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 10:40:34 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x400000) 10:40:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x73, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) fadvise64(r1, 0x8f, 0x5f5d, 0x5) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3f00000000000000fd148a4c3c846ccdfb707be247c677080093b5a56a42c9a9216819eab0948e2ade689828c65ad8776cd091416b0c22f5cad60a98521b881b80cdfa87dd07eeed47920729a015b4b4acfda3701067670d0d1100"/103], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 10:40:34 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000) 10:40:34 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x56de, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x7ffff000, 0x811) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') setresuid(0xffffffffffffffff, r4, 0x0) r6 = syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x4, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000300)="b6dab5530c5c89f372e87cb4459e6cf66ac1284ae7fc045a50e45267eb74f335d787123401416470449512dc1965ca25cbf522acf8560514276851157a46dfbe1fe300755593380061884cb19585909e3c0985259c60ed0e54ee2782cce304e3db60247ed2d5415d3255400001f75b10995095c735da3170277e04e36ff8df5257662c63ba2de060109b9149817795abbd7c836c56f9d21bf57c752ba7aecd03", 0xa0}], 0x40, &(0x7f0000000500)={[{@nojoliet}, {@map_off}, {@check_relaxed}, {@gid={'gid', 0x3d, r5}}, {@uid={'uid', 0x3d, r4}}, {@session={'session', 0x3d, 0x10}}, {@nojoliet}, {@nojoliet}, {@hide}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@euid_lt={'euid<', r4}}, {@permit_directio}]}) statx(r6, &(0x7f0000000400)='./file0\x00', 0x100, 0x8, &(0x7f0000000600)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1518.023995] FAULT_INJECTION: forcing a failure. [ 1518.023995] name failslab, interval 1, probability 0, space 0, times 0 [ 1518.025568] CPU: 1 PID: 9391 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 1518.026454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1518.027508] Call Trace: [ 1518.027862] dump_stack+0x107/0x167 [ 1518.028330] should_fail.cold+0x5/0xa [ 1518.028810] ? __io_queue_proc+0x262/0x5a0 [ 1518.029344] should_failslab+0x5/0x20 [ 1518.029830] kmem_cache_alloc_trace+0x55/0x320 [ 1518.030406] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1518.031056] __io_queue_proc+0x262/0x5a0 [ 1518.031635] ? io_poll_queue_proc+0x50/0x50 [ 1518.032180] n_tty_poll+0xc0/0x900 [ 1518.032624] ? n_tty_ioctl+0x370/0x370 [ 1518.033110] tty_poll+0x144/0x1c0 [ 1518.033554] ? tty_release+0xe90/0xe90 [ 1518.034055] __io_arm_poll_handler+0x399/0x9e0 [ 1518.034654] __io_queue_sqe+0x52b/0x9d0 [ 1518.035155] ? io_issue_sqe+0x77b0/0x77b0 [ 1518.035681] ? __fget_files+0x2f8/0x520 [ 1518.036177] ? io_poll_queue_proc+0x50/0x50 [ 1518.036729] ? io_prep_rw+0x7f5/0x1050 [ 1518.037231] io_submit_sqes+0x44aa/0x8610 [ 1518.037790] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1518.038414] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1518.039027] ? find_held_lock+0x2c/0x110 [ 1518.039543] ? io_submit_sqes+0x8610/0x8610 [ 1518.040094] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1518.040468] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1518.040712] ? wait_for_completion_io+0x270/0x270 [ 1518.043259] ? rcu_read_lock_any_held+0x75/0xa0 [ 1518.043843] ? vfs_write+0x354/0xb10 [ 1518.044312] ? fput_many+0x2f/0x1a0 [ 1518.044769] ? ksys_write+0x1a9/0x260 [ 1518.045251] ? __ia32_sys_read+0xb0/0xb0 [ 1518.045767] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1518.046421] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1518.047072] do_syscall_64+0x33/0x40 [ 1518.047537] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1518.048174] RIP: 0033:0x7f0f01994b19 [ 1518.048639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1518.050933] RSP: 002b:00007f0efef0a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1518.051905] RAX: ffffffffffffffda RBX: 00007f0f01aa7f60 RCX: 00007f0f01994b19 [ 1518.052800] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1518.053693] RBP: 00007f0efef0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1518.054579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1518.055474] R13: 00007ffe18ea049f R14: 00007f0efef0a300 R15: 0000000000022000 10:40:34 executing program 4: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 10:40:34 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeffd) 10:40:34 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) [ 1518.193408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1518.194307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1518.195272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1518.213501] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1518.274438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1518.275322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1518.276230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:40:34 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffdef) 10:40:34 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) timer_gettime(0x0, &(0x7f0000000500)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x4, &(0x7f0000000240)={0x0, 0x1b, 0x0, @thr={&(0x7f00000002c0)="27be22b1a28d3fdb8212f5e2f076ba7e98707bde79881f75d7386fd45e5a449d61c04c41d6d0793f0b92c84dd6f5446e4c5fcf0d986d6949836588da36946921ec81e365ecc01b2a8b57d1784358198193f9de3c8ea0058c21daeab08b997440092dee952688a76cc164f65827d55bdf16606f616697ca6ba6da99b25a3e0232757b", &(0x7f0000000080)="dfc788d1f6c8de83fac039d4a9f5fa10795db4dc58c7548e1cd645f68062740d00889b06d1949e"}}, &(0x7f0000000380)=0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000400)={{}, {r1, r2+60000000}}, &(0x7f00000004c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x290d) timer_create(0x4, &(0x7f0000000000)={0x0, 0x2b, 0x4, @thr={&(0x7f00000005c0)="efab53c8136efb71e40bb05b68fc4091adcda54781f7ee552dcade011ff73469e309c4401fa2aab13dae13d842521ca1475d0a4ea616de93d95dc09dc7841a84f21d0ba34edc0c8876b02d9661d5d04c457ab836ae01b0ed5c4750ec31c78e6e7ddac3b16c28700e270a371c56bce215f1068f8a136bb94d7833c7eb69f7969c0b9a33e89b671cdf7133ae08216c830149126c6881c45b06b1a8404d5358b3c2491a5a9a6650b52c46", &(0x7f0000000680)="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"}}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000001680)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000016c0)) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x77359400}}, &(0x7f0000000440)) socket$inet6_udplite(0xa, 0x2, 0x88) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/bus/machinecheck', 0x6281, 0x19) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x77359400}}, &(0x7f0000000580)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)) clone3(&(0x7f00000001c0)={0xc8182300, 0x0, 0x0, 0x0, {0x36}, 0x0, 0xffffffffffffff43, 0x0, 0x0}, 0x58) 10:40:34 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffdef) 10:40:34 executing program 4: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 10:40:34 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x107100, 0x0) r1 = memfd_create(&(0x7f0000019300)='\x00', 0x3) read(r1, &(0x7f00000000c0)=""/102398, 0x18ffe) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00), 0x7ffff000, 0x811) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f00000192c0)=0x4) fallocate(0xffffffffffffffff, 0x11, 0x5, 0x7a4) r3 = openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) pread64(r0, &(0x7f00000190c0)=""/61, 0x3d, 0x50) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000040)=0x5) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000019100), 0x20000, 0x0) write$binfmt_elf64(r4, &(0x7f0000019140)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x81, 0x81, 0x7, 0x2, 0x3, 0x3, 0x5d, 0x184, 0x40, 0x23e, 0x2, 0xc9, 0x38, 0x1, 0x3ff, 0x8, 0xe00}, [{0x0, 0xc2, 0x3, 0x5, 0xff, 0x9, 0x1, 0x2378}, {0x70000000, 0x6ac, 0x6, 0xfffffffffffff801, 0x110f, 0x200, 0x2, 0x4}], "e0f575173dc5af13b7b63847a1b929802f89d33cad8f17ba3d6b02331fed980dfc7898486911bdeb6d56f8a1531038fc2180bb2504ff4f0fe49d611c29aacfbdadfbfb13aacd7ec1a77affa9386b9e3094e292ef6d3b0d72c9ccd121066dfaf1681347eb1d64fe57a8cc392ee7d5a365f8d655c449aff936aae111ae0e5d3c77e182fad4cc1bafd1ac96f56e83473d86273bff6ed4ce6b70f1cf5c0224c9f34f84b6ef23c07f5bb032fc4947564735632b402b00f09d7f170c1e74a4f912301f8f8b890ea79d2f75"}, 0x178) perf_event_open(&(0x7f0000019380)={0x0, 0x80, 0x4, 0xc, 0x20, 0x60, 0x0, 0xfffffffffffff800, 0x2000, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000019340), 0x8}, 0x1000, 0xfffffffffffffffe, 0x1ff, 0xc, 0x3, 0xb625, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x1) 10:40:50 executing program 4: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 10:40:50 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5ff) 10:40:50 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeffdffff) 10:40:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x847d, 0x0, 0x2, 0x269}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r4) syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2004, @fd_index, 0x8, 0x9, 0x954, 0x0, 0x1, {0x1, r4}}, 0x80) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[], 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) bind$unix(r6, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x103, 0x160) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe5}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x100000001) setresuid(0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380), &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x8}, {0xfffffffc, 0xffffffff}]}, 0x18, 0x1) 10:40:50 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffff5) 10:40:50 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffff5) 10:40:50 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) 10:40:50 executing program 7: timer_create(0x2, &(0x7f0000000000)={0x0, 0x1c, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x11, 0x0, @thr={&(0x7f0000000040)="23f50ce08221e8f55419a99660837f449fe26492b9e29bf39c38626f64220c827ad866f8c6fe603605e45315d5656e2ee1198cd669b1d88014a0bb00c240e77562ffdf4c", &(0x7f0000000240)="8299863715318038ead9f745b70f28cdf644012287cb4588961b16cb2f2326afd92d00319727f6f9722d35586d4653b716544b885e3a5c107a3e0c9205b75d964f82be2f45a2d85ca94adbcf78389938882df25b30ec9915789119a45075877b250455fe54bea180c085f365a569b152d5cabd6b69fa6b9ccc4cfb238cf403acea10c171eaafebe1893aaca20e4c"}}, &(0x7f0000000100)=0x0) timer_create(0x3, &(0x7f00000003c0)={0x0, 0x1000002e, 0x2, @thr={&(0x7f0000000380)="046d91aabe8b59babf80879a918c2766328ef52030c386efa3c0656393ae2ee7a4b47e9bdde8e8b7c1a281b4dedccef9736d11a8c1303a6714e9969009d0", &(0x7f00000004c0)="7ae662e921d48f4f924675059336348f18fd2b1bfb69dbe80402f0dd936eb90d84d6c60c1942ceb8a9813193e6941b55cfffa85565946e85b2904d2f4b55bbfa173209483d68863c55ac8834944119f1c1fe23b58d6dae0562abdf5b482d3f97a3c6ed0825b36a39424721099792a397536b185819b1d66895469d69bef92d75d35087540aea5bfa5b6688b47aa974ecc3922ab460f3de490000000000"}}, &(0x7f0000000340)=0x0) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x2, &(0x7f0000000240)) timer_settime(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000400)={{r3, r4+60000000}, {r5, r6+60000000}}, &(0x7f0000000440)) timer_delete(r1) clone3(&(0x7f00000001c0)={0x40182500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_delete(r0) socketpair(0x5, 0x3, 0x6bee, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = signalfd(r7, &(0x7f0000000300)={[0x54]}, 0x8) connect$inet6(r9, &(0x7f0000000340)={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000004d00), 0x7ffff000, 0x811) ioctl$BTRFS_IOC_SNAP_DESTROY(r7, 0x5000940f, &(0x7f00000004c0)={{r8}, "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"}) 10:40:50 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d98c20f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1423ac00210000092cbd686b46f6470cb3a2ec0c77468efe5886d81b6ba804cdb4a5fbdb7875fba8d15b5ac6e68a732725035c47bb9f6eef0108f479e52f05e3aedb7819b38664d3be6ad16bdb1f05e6d3df1bc5d13400df3c6dd4c59b12065a606dccd7473488d708f59a463567236abda1ddf0894ab552bd59ea9d309472fdafad9501"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x20040000) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) unshare(0x48020200) [ 1533.765492] FAULT_INJECTION: forcing a failure. [ 1533.765492] name failslab, interval 1, probability 0, space 0, times 0 [ 1533.768586] CPU: 0 PID: 9460 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 1533.770227] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1533.772132] Call Trace: [ 1533.772742] dump_stack+0x107/0x167 [ 1533.773580] should_fail.cold+0x5/0xa [ 1533.774466] ? create_object.isra.0+0x3a/0xa20 [ 1533.775518] should_failslab+0x5/0x20 [ 1533.776398] kmem_cache_alloc+0x5b/0x310 [ 1533.777335] create_object.isra.0+0x3a/0xa20 [ 1533.778365] kmem_cache_alloc_trace+0x151/0x320 [ 1533.779435] ? __io_queue_proc+0x22d/0x5a0 [ 1533.780407] __io_queue_proc+0x262/0x5a0 [ 1533.781343] ? io_poll_queue_proc+0x50/0x50 [ 1533.782354] n_tty_poll+0xc0/0x900 [ 1533.783171] ? n_tty_ioctl+0x370/0x370 [ 1533.784070] tty_poll+0x144/0x1c0 [ 1533.784866] ? tty_release+0xe90/0xe90 [ 1533.785762] __io_arm_poll_handler+0x399/0x9e0 [ 1533.786838] __io_queue_sqe+0x52b/0x9d0 [ 1533.787762] ? io_issue_sqe+0x77b0/0x77b0 [ 1533.788721] ? __fget_files+0x2f8/0x520 [ 1533.789633] ? io_poll_queue_proc+0x50/0x50 [ 1533.790645] ? io_prep_rw+0x7f5/0x1050 [ 1533.791557] io_submit_sqes+0x44aa/0x8610 [ 1533.792553] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1533.793708] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1533.794844] ? find_held_lock+0x2c/0x110 [ 1533.795793] ? io_submit_sqes+0x8610/0x8610 [ 1533.796807] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1533.797943] ? wait_for_completion_io+0x270/0x270 [ 1533.799059] ? rcu_read_lock_any_held+0x75/0xa0 [ 1533.800131] ? vfs_write+0x354/0xb10 [ 1533.800991] ? fput_many+0x2f/0x1a0 [ 1533.801838] ? ksys_write+0x1a9/0x260 [ 1533.802716] ? __ia32_sys_read+0xb0/0xb0 [ 1533.803648] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1533.804856] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1533.806051] do_syscall_64+0x33/0x40 [ 1533.806908] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1533.808094] RIP: 0033:0x7f0f01994b19 [ 1533.808953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1533.813216] RSP: 002b:00007f0efef0a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1533.814975] RAX: ffffffffffffffda RBX: 00007f0f01aa7f60 RCX: 00007f0f01994b19 [ 1533.816617] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1533.818253] RBP: 00007f0efef0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1533.819851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1533.821455] R13: 00007ffe18ea049f R14: 00007f0efef0a300 R15: 0000000000022000 10:40:50 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000000000) 10:40:50 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffffffffffff) [ 1533.971231] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 10:40:50 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfdef) 10:40:50 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5ffffff) 10:40:50 executing program 4: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x1000, 0x8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x90) ioctl$NS_GET_OWNER_UID(r3, 0xb704, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4, {r1}}, './file1\x00'}) fcntl$dupfd(0xffffffffffffffff, 0x0, r5) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000001) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x122902, 0x0) writev(r6, &(0x7f00000006c0)=[{&(0x7f0000000180)="647732419e007299a0527d51dc496437e692665510d40d35b770fd8d702d121d997dc90d08763cc1ed88ba0f538cb17d600a", 0x32}], 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r2}}, {@posixacl}, {@loose}, {@version_u}, {@dfltgid}, {@version_9p2000}], [{@fowner_eq}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000700)={0x11c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf39}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x36c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x45}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x153}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) [ 1534.326838] SELinux: duplicate or incompatible mount options 10:40:50 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='nfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xc2420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x8000, 0x2000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x91b, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffc01}, 0x1c) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x5, 0x4001c0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001e00)=ANY=[@ANYRES16=r5], 0x24}}, 0x0) unlinkat(r5, &(0x7f0000000000)='./file0\x00', 0x0) clone3(&(0x7f0000000540)={0x50000, &(0x7f0000000100)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x17}, &(0x7f00000002c0)=""/229, 0xe5, &(0x7f00000003c0)=""/76, &(0x7f0000000440)=[0xffffffffffffffff], 0x1, {r3}}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x2000, @fd=r6, 0x3, 0x0, 0x0, 0x19, 0x1, {0x3}}, 0x8616) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000600)={'nr0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) openat2(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', &(0x7f00000000c0)={0x109002, 0xdb}, 0x18) [ 1534.631551] SELinux: duplicate or incompatible mount options 10:41:03 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000000000) 10:41:03 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) execve(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000180)='-\x00'], &(0x7f0000000480)=[&(0x7f0000000240)='/dev/ptmx\x00', &(0x7f0000000280)='-\x00', &(0x7f00000002c0)='/dev/ptmx\x00', &(0x7f00000003c0)='(%\\^}[+\\(\x00', &(0x7f0000000400)='\\)&((\\\x00', &(0x7f0000000440)='/\'[/#[#\x00']) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:41:03 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x4, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6628) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x7ffff000, 0x811) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000280), 0x200000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}, {@cache_mmap}, {@aname={'aname', 0x3d, '\x00'}}, {@msize={'msize', 0x3d, 0x3}}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}}) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0) fsmount(r2, 0x0, 0x2) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r5, 0x0, r4) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f00000004c0)={0x200000000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100), {0x10}, &(0x7f00000001c0), 0x0, &(0x7f0000000400)=""/80, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',cache=\x00']) 10:41:03 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="148394a677ef3d0e14f69afda31a5300000000808f01000000001c00000000000000010000f76861875764d554eef17f6d000800", @ANYRES32=r3], 0x38}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000000)=""/90, &(0x7f0000000180)=0x5a) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYBLOB="110d04f8e40000f7ffff6f0000000c0099000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0xc801}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req={0x9, 0x3d0, 0x6, 0x61}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 10:41:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r2, 0x4, 0xc00) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) open_by_handle_at(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="10160000aaacf7959c861b9414110200000008002e0000004b8a22e2ac8026912b25cadf4f024a904c9025512b0ab665421550c879c1de0350ad208504a52a6263ffbe5cfe9af750230e7150c87cd8c0d5e5fbfb0f04c8f65a1fee6014e86028a33146cc36d93915b900c68bf487d4b9f72f83c5bb6495fbc83a2d7570f34c6a5310a0"], 0x8e880) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x1, r6, 0x1, 0x8, 0x6, @random="190002400a00"}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000240)) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f00000000c0)=""/78, &(0x7f0000000180)=0x4e) 10:41:03 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffdef) 10:41:03 executing program 3: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) 10:41:03 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfff5) [ 1547.536480] FAULT_INJECTION: forcing a failure. [ 1547.536480] name failslab, interval 1, probability 0, space 0, times 0 [ 1547.538239] CPU: 0 PID: 9523 Comm: syz-executor.3 Not tainted 5.10.236 #1 [ 1547.539172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1547.540284] Call Trace: [ 1547.540639] dump_stack+0x107/0x167 [ 1547.541123] should_fail.cold+0x5/0xa [ 1547.541641] ? io_setup_async_rw+0x180/0x580 [ 1547.542259] should_failslab+0x5/0x20 [ 1547.542778] __kmalloc+0x72/0x390 [ 1547.543249] io_setup_async_rw+0x180/0x580 [ 1547.543831] io_read+0xe98/0x11e0 [ 1547.544319] ? find_held_lock+0x2c/0x110 [ 1547.544861] ? kiocb_done+0xc90/0xc90 [ 1547.545374] ? mark_lock+0xf5/0x2df0 [ 1547.545879] ? lock_downgrade+0x6d0/0x6d0 [ 1547.546452] ? lock_chain_count+0x20/0x20 [ 1547.547028] ? queue_delayed_work_on+0xe0/0xe0 [ 1547.547648] ? __lock_acquire+0xbb1/0x5b00 [ 1547.548220] io_issue_sqe+0x2e8a/0x77b0 [ 1547.548753] ? find_held_lock+0x2c/0x110 [ 1547.549304] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1547.550009] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1547.550650] ? lock_downgrade+0x6d0/0x6d0 [ 1547.551212] ? io_connect+0x610/0x610 [ 1547.551730] ? lock_acquire+0x197/0x470 [ 1547.552274] ? find_held_lock+0x2c/0x110 [ 1547.552828] ? __fget_files+0x2cf/0x520 [ 1547.553370] ? lock_downgrade+0x6d0/0x6d0 [ 1547.553943] __io_queue_sqe+0x90/0x9d0 [ 1547.554475] ? io_issue_sqe+0x77b0/0x77b0 [ 1547.555037] ? __fget_files+0x2f8/0x520 [ 1547.555579] ? io_prep_rw+0x7f5/0x1050 [ 1547.556120] io_submit_sqes+0x44aa/0x8610 [ 1547.556694] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1547.557371] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1547.558025] ? find_held_lock+0x2c/0x110 [ 1547.558578] ? io_submit_sqes+0x8610/0x8610 [ 1547.559163] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1547.559816] ? wait_for_completion_io+0x270/0x270 [ 1547.560464] ? rcu_read_lock_any_held+0x75/0xa0 [ 1547.561090] ? vfs_write+0x354/0xb10 [ 1547.561637] ? fput_many+0x2f/0x1a0 [ 1547.562285] ? ksys_write+0x1a9/0x260 [ 1547.562788] ? __ia32_sys_read+0xb0/0xb0 [ 1547.563346] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1547.564040] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1547.564734] do_syscall_64+0x33/0x40 [ 1547.565230] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1547.565922] RIP: 0033:0x7f0f01994b19 [ 1547.566434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1547.568888] RSP: 002b:00007f0efef0a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1547.569906] RAX: ffffffffffffffda RBX: 00007f0f01aa7f60 RCX: 00007f0f01994b19 [ 1547.570868] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1547.571824] RBP: 00007f0efef0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1547.572781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1547.573741] R13: 00007ffe18ea049f R14: 00007f0efef0a300 R15: 0000000000022000 10:41:04 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x200000) 10:41:04 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbe66f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2030}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x40, 0x0, 0x1f, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1, 0x0, 0x1001, 0x0, 0x9, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvmmsg(r0, &(0x7f0000000000), 0x5ac, 0x0, 0x0) 10:41:04 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) 10:41:04 executing program 2: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x80000) recvmsg(r4, &(0x7f0000000540)={&(0x7f0000000240)=@can, 0x80, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/134, 0x86}, {&(0x7f00000001c0)=""/43, 0x2b}], 0x2, &(0x7f0000000480)=""/166, 0xa6}, 0x10040) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:41:04 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffff5) 10:41:04 executing program 0: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x400000) 10:41:04 executing program 1: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x341}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeffdffffffffffff) VM DIAGNOSIS: 10:46:13 Registers: info registers vcpu 0 RAX=ffffffff83e8ee20 RBX=0000000000000000 RCX=ffffffff83e769bc RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e8f428 RBP=0000000000000000 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85678ec8 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e8ee2e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a3d17469ac CR3=000000001b96e000 CR4=00350ef0 DR0=0000000100000000 DR1=0000000100000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000007000000060000000000000000 XMM02=61746f7420636578650a0a0100010101 XMM03=7473657220726f74756365786511006c XMM04=09006e65672063657865080073747261 XMM05=20636578650e007a7a75662063657865 XMM06=20636578650a006574616469646e6163 XMM07=6169727420636578650b0073746e6968 XMM08=726f74756365786511006c61746f7420 XMM09=20636578650800737472617473657220 XMM10=0e007a7a7566206365786509006e6567 XMM11=0a006574616469646e61632063657865 XMM12=636578650b0073746e69682063657865 XMM13=696d20636578650d0065676169727420 XMM14=616d7320636578650a00657a696d696e XMM15=0000736465657320636578650a006873 info registers vcpu 1 RAX=ffffffff83e8ee20 RBX=0000000000000001 RCX=ffffffff83e769bc RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e8f428 RBP=0000000000000001 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85678ec8 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e8ee2e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f005a721010 CR3=000000001b96e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004183eb32c0000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000