? rcu_read_lock_any_held+0x75/0xa0 [ 2037.699663] ? vfs_write+0x354/0xb10 [ 2037.700457] ? fput_many+0x2f/0x1a0 [ 2037.701277] ? ksys_write+0x1a9/0x260 [ 2037.702097] ? __ia32_sys_read+0xb0/0xb0 [ 2037.702968] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2037.704092] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2037.705204] do_syscall_64+0x33/0x40 [ 2037.706013] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2037.707113] RIP: 0033:0x7f0bbbb8ab19 [ 2037.707912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2037.711829] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2037.713466] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2037.714988] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2037.716516] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2037.718054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2037.719576] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:31:53 executing program 1: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2037.753933] EXT4-fs (sda): quotafile must be on filesystem root [ 2037.770254] EXT4-fs (sda): quotafile must be on filesystem root 05:32:10 executing program 5: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x709d, 0x0, 0x0, 0x10, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) open(&(0x7f0000000080)='./file0/../file0\x00', 0x183040, 0x84) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000040)={[{@data_ordered}]}) 05:32:10 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:32:10 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) 05:32:10 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x2, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:32:10 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x8, 0x0, 0x0) 05:32:10 executing program 1: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:32:10 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 05:32:10 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="c4cb4458010000800000000063616368653d6e6f6e652c00"]) r3 = fork() ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) fork() [ 2054.308143] EXT4-fs (sda): re-mounted. Opts: data=ordered,,errors=continue [ 2054.320645] 9pnet: Insufficient options for proto=fd [ 2054.340734] FAULT_INJECTION: forcing a failure. [ 2054.340734] name failslab, interval 1, probability 0, space 0, times 0 [ 2054.343424] CPU: 0 PID: 28372 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2054.344894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2054.346659] Call Trace: [ 2054.347222] dump_stack+0x107/0x167 [ 2054.347991] should_fail.cold+0x5/0xa [ 2054.348803] ? create_object.isra.0+0x3a/0xa20 [ 2054.349781] should_failslab+0x5/0x20 [ 2054.350588] kmem_cache_alloc+0x5b/0x310 [ 2054.351449] ? mark_held_locks+0x9e/0xe0 [ 2054.352318] create_object.isra.0+0x3a/0xa20 [ 2054.353244] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2054.354328] kmem_cache_alloc_bulk+0x168/0x320 [ 2054.355306] io_submit_sqes+0x6fe6/0x8610 [ 2054.356209] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2054.357267] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2054.358304] ? find_held_lock+0x2c/0x110 [ 2054.359169] ? io_submit_sqes+0x8610/0x8610 [ 2054.360086] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2054.361106] ? wait_for_completion_io+0x270/0x270 [ 2054.362136] ? rcu_read_lock_any_held+0x75/0xa0 [ 2054.363113] ? vfs_write+0x354/0xb10 [ 2054.363903] ? fput_many+0x2f/0x1a0 [ 2054.364670] ? ksys_write+0x1a9/0x260 [ 2054.365473] ? __ia32_sys_read+0xb0/0xb0 [ 2054.366338] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2054.367456] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2054.368548] do_syscall_64+0x33/0x40 [ 2054.369334] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2054.370426] RIP: 0033:0x7f0bbbb8ab19 [ 2054.371211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2054.375098] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2054.376715] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2054.378226] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2054.379735] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2054.381241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2054.382749] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:32:10 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:32:10 executing program 1: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:32:10 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) r0 = getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@local, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x44, &(0x7f0000000400)={'trans=unix,', {[{@dfltuid={'dfltuid', 0x3d, r0}}, {@cache_mmap}, {@fscache}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@access_any}, {@cache_loose}, {@version_L}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@dont_measure}, {@smackfsdef={'smackfsdef', 0x3d, '/*'}}, {@euid_eq={'euid', 0x3d, r1}}, {@fowner_lt={'fowner<', r2}}]}}) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000040)={[{@data_ordered}]}) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') 05:32:10 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) [ 2054.526660] 9pnet: p9_fd_create_unix (28563): problem connecting socket: ./file0/../file0: -111 05:32:10 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) stat(&(0x7f0000000400)='./file2\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {r1, r2}}, '.\x00'}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000500)={'ip6erspan0\x00'}) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000180)='./file1\x00', &(0x7f0000000200), 0x200086, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') chmod(&(0x7f0000000300)='./file2\x00', 0x20) pread64(r4, &(0x7f0000000040)=""/55, 0x37, 0x0) getdents(r4, &(0x7f0000000280)=""/88, 0x58) 05:32:10 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@private1, 0x1f, r5}) 05:32:10 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder-control\x00', 0x800, 0x0) readv(r3, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/82, 0x52}, {&(0x7f0000000280)=""/217, 0xd9}, {&(0x7f0000000380)=""/46, 0x2e}, {&(0x7f0000000600)=""/234, 0xea}, {&(0x7f00000003c0)=""/180, 0xb4}, {&(0x7f0000000500)=""/179, 0xb3}], 0x6) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans^fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c63616368653d6d6d61702c636163689c1600006e652c00"]) r4 = fork() ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) openat$hpet(0xffffffffffffff9c, &(0x7f0000000780), 0x351044, 0x0) 05:32:10 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2844, 0x0, 0x0) 05:32:10 executing program 1: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2, 0x0, 0x0) 05:32:24 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:32:24 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r4}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r4}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r4}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYRES64=r5]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r4, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:32:24 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) 05:32:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) stat(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101000, 0x29) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f00000003c0)=0xe8) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000540)=ANY=[@ANYBLOB="7573726a71756f74613d2c736d61636b66736861743d65787432002c6f626a5f757365723d3a2c686173682c636f6e746578743d73746166665f752c7569643dd57d4cc938056e02689a330df6ab60ff02e596dad714a987f48be08b53ac515c5350c936c736c0642e9eb47b9a2a99962ade500ef28be8f97997c083dde74a3caf8c3048efbe86ad288090c16a6ce09d7b7e99ecfdbeffcd", @ANYRESDEC=r0, @ANYBLOB=',subj_role=data=ordered,pcr=00000000000000000042,context=system_u,uid=', @ANYRESDEC=r1, @ANYBLOB=',\x00']) 05:32:24 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x2fd4, 0x0, 0x0, 0x10f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='io\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r3 = fork() ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:32:24 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2845, 0x0, 0x0) [ 2068.892079] EXT4-fs (sda): Unrecognized mount option "smackfshat=ext2" or missing value 05:32:24 executing program 4: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xf8, 0x7, 0x7, 0x2, 0x1000}) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r4 = fork() ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0xd8, 0x2e, 0x400, 0x70bd28, 0x25dfdbfb, {0x19}, [@generic="ea2b095693cbd118c1080744c8632503ac4c89906c3873f2b2b7009123c3fa495bc4bc154f45fd8f57bfc26cb98617f7152cd00a746a688d865cd5559d4dd48ece169c913798ab2a1227e1cf69190ce8d21e151af0ab5d4b76677d4329077d6777c9467771f43e57bf5fb04e365709e443d8ba77a7edc852207c709cbe358a45d4b1ad8ea42e2b73e070b8066b04e39eb4ea7acf74c56b4c2923af5cc798912c84dc63ae4bcc3c1a905669b64547fc806142ad19a7b16892e7eb1a280d0cf131a5ce"]}, 0xd8}}, 0x2000c800) 05:32:24 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) [ 2068.905376] EXT4-fs (sda): Unrecognized mount option "smackfshat=ext2" or missing value [ 2068.918500] FAULT_INJECTION: forcing a failure. [ 2068.918500] name failslab, interval 1, probability 0, space 0, times 0 [ 2068.921266] CPU: 0 PID: 28925 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2068.922840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2068.924699] Call Trace: [ 2068.925297] dump_stack+0x107/0x167 [ 2068.926141] should_fail.cold+0x5/0xa [ 2068.927009] ? create_object.isra.0+0x3a/0xa20 [ 2068.928041] should_failslab+0x5/0x20 [ 2068.928899] kmem_cache_alloc+0x5b/0x310 [ 2068.929828] ? create_object.isra.0+0x3ad/0xa20 [ 2068.930877] create_object.isra.0+0x3a/0xa20 [ 2068.931866] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2068.933015] __kmalloc_node+0x1ae/0x420 [ 2068.933928] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2068.935074] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 2068.936193] ? trace_hardirqs_on+0x5b/0x180 [ 2068.937168] kmem_cache_alloc_bulk+0x182/0x320 [ 2068.938218] io_submit_sqes+0x6fe6/0x8610 [ 2068.939178] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2068.940288] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2068.941386] ? find_held_lock+0x2c/0x110 [ 2068.942315] ? io_submit_sqes+0x8610/0x8610 [ 2068.943291] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2068.944373] ? wait_for_completion_io+0x270/0x270 [ 2068.945460] ? rcu_read_lock_any_held+0x75/0xa0 [ 2068.946512] ? vfs_write+0x354/0xb10 [ 2068.947353] ? fput_many+0x2f/0x1a0 [ 2068.948171] ? ksys_write+0x1a9/0x260 [ 2068.949024] ? __ia32_sys_read+0xb0/0xb0 [ 2068.949951] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2068.951131] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2068.952293] do_syscall_64+0x33/0x40 [ 2068.953130] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2068.954289] RIP: 0033:0x7f0bbbb8ab19 [ 2068.955125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2068.959258] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2068.960960] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2068.962574] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2068.964173] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2068.965777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2068.967380] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:32:24 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2846, 0x0, 0x0) 05:32:25 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000240)=ANY=[@ANYBLOB="646174613d298b30b87265642c003b05f8adc489368f108c580ce5fe8d296cfd86e9cf48efb6aa385a7ed0660dca525f5f59bdf2fc657f5944c5e18d4122dde09651152820ef2e0444d10633ca38ef"]) [ 2069.019071] EXT4-fs (sda): Unrecognized mount option "data=)‹0¸red" or missing value [ 2069.036295] EXT4-fs (sda): Unrecognized mount option "data=)‹0¸red" or missing value 05:32:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:32:25 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x6}, 0x11020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:32:25 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mount$bind(&(0x7f0000001440)='./file0/../file0\x00', &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0), 0x1080000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001240)={0x0, 0x0}, &(0x7f0000001280)=0xc) fstat(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, 0x1, &(0x7f0000000180)=[{&(0x7f0000000240)="895baf5b03b99c8a0e3c5d8507de64a47ec384442cafe6f13cadb0b8735de844d543064e7ef4259e3735edcca0adc94ad669a7affdf1a04df92c1037e41aaa55b5f50fee979c83c046a5312d9dd54d6c76fce4a8d084d21211d7f226a3e1c6f30f6b5f4923967088e5aea0a5d92535dabe30d03cabd09525a99d146b180fd11ac5ff45a0a3b4e5593fc34886d4c252626ee1e9d39830c47771f18bcb73a67907919c71cacbdc87de18402af58b978376429e8d212ac4061a134f64a3ce10ab4cf8764777f89dc57bea505d150f629735b28722b231ac9b44527bc2a3884d732888c3a8ef0187477580bd048258a46cab2aa2c2db94a9bebb5fbbacdde6441355ff2b520659454c075e7aa180de6dd324d9f05d209907e4d54fc9f07f41144a4bd7f9700202a99071eb28669c6f854c6896a66652b3901594e909346dfbfcf79cc2f75dccb97a2c17da418406d7ea1e33d118ea0aecc3224dc5b12dc582e680d93c60478df3daa8746937ea58af2dee5a97f70059b0c1dc43d0881dc7cc6aa7368d3fdee2619f4cfb8a4a4b148e493f93e9bf57d8c5128e2a2835dbd6d170f8a3d0fc26be50e5f9fd7ce0f4f465a7b470b3f19c74b062b75ff3c2c81f806b23d62393fae071f4face51d4b49341838b4677920c715649abb707d249d6acd0e5751dfdc3d23e61f58a02d928ea24190fde946960236e9a734434808b8c3da93754fa4812cdd30a1ffac1576970671dd323e157373804e76eb804e46370c8cd237e5d346e2d86a6d13635ae22ad723d79c9a51bbe529043cc6e52817a7cc58f757b6dda776c857ec805be36451b3feda03555f558b4a39b0ec585a7b5f7200234a88f8073eec3894e318a233734a3e78aff9dc1a5743dd9cbe5221aef5db59872c49e9d457f4dd55f1478bd55bd7595b57e9f35efdcd402ed46279b822f2e399ff488f8aeef7448d3d5cf5a6378ab1fdc6fa0b5a5f64322f80bd56f0697d52c9ac4dc123bc00a20eb9d0d9467a145b645e107f4d0a6b00619a46b653fcca2129d5046bd32b0253ba2eb7b50591e99ff33535706d05c0203d9667c8ea49c919d20a07a06342c00f5798c855e751624c02079f388693c91da25324a26fa3880126acc9a29cf30d6c962580861f973d36003d6057fe69fda22ea24b1f752abfbe566028d4e0bc0d9d7b94d2b5703d221323ba01d2fb60c16443a27c16b142c6052429f60a7fbb2f9efa26c3f27279464f4270e98eca00df5a85f9dfb7ba37849ed3362f80dc3a71ece4bb70d89b75ee30101086a04eff90f636a491dad2b50ba6c327776fc01a8560019c787aca25a1a4c6d700d73029ab297969986fc1fe65f2cf819d0e74398d1eb976242bfc7b6c5c48632bbdc6beb81e764bc252a5b340bedecd321e6d63245fd02a4efb67acd16e2a6860f9d95f8c3b466ca2157262a8e92a203507dc52041fc01554671820a43450ed391167ae48fb7546d4f4e7ef6814797430ded68db308ca87606feba3cbb0c59e25ea79a25798181692b5138a643b8d520d3c9512501cfacedfddae176c40bc4fa6ced717a5b4d1cedceb6e3417c588635e830fd8a16353efc7f2adb7b4a347624f798e0009968a7a751a298f06188728442061927b3c7de944b1e2815b5c3b7d87db76053ebea3c9d3888057dee587c6ee3e2707577d768287f62c96b3d5ba2876dceb1a44365c59f6e3ca4c25c4ef5fcf18161c62400c921bdbe31c2cdea2b96da755c80719dd1b97c321d7d4f378824cf005bb9c1e0fbdc7a7ae8d0cac16b8c0810c2aa3432432a3f71e6a807b6d62f7fbd8d0a409689362585d0d24a6a0142b9f57308433a08d6c44d085836de09eae6ccd685057a546201b7efc3adc7289e38de9319e14a3013dc46cb5c4f595c9fa09158c0611b6cfcba846fd2a5760c2c27a3255429da35287ca2767314e4ab3e00a119716fd4daa24b44cd07019cd179be526c8f653b68882279625c8eb400114dc6c8b6cafbc1af084b166b50655f780429a6f34a9eec908c9ec924fb1bc6442789773a2ba43868f43c5a26af29f89a9e9aee87b9b2ff2993938f29bd80fb022f6980ab94e6d205c696d008b6845c8de8928e576e839ec49c60377ab0004c23a39d1c7a4fbc54df423491007e5040f329bff96b1c2c29198aa5cba33dfc39e2890ab819ab4efacad6e1cc00f57426e4a281583fa2d6301032446b2fff4283d12afc8d44f4da9c4b968c03ce1cbd10c4c752b8586c69377a8c5cebfbb09a9b49850e10d916e4ee20ca5613e13ff5e06b3d36891b74c7e68e54e0affe64487a5ca9ecc467512a2f7c99feacbab822b83d557b85a929c44129f0c93a4e4f99e0df67262d9d1b0db16f87dcb61d68e7975eb9e8ec41384b65ec0141f1592325863241564ea7c3f68bea6b6e148d2fbf1632319803d2874791061ed77ed77e365fe1ca9b2404bdf8ae7e536f0fd95d34a4f29a0f6919133b8d23a85f86329129089f9402ba411f4d18eae2c475ed3d67d9cada04f108648b598c6748b17f59fbbf23d59a3571428455a97c531009fedf83a6b13baffc7e71ed69077ba4284eea70186504477c406bf7edce630739192ad85e47867dffe1c593197db3095205a5e2e0c5220b7a386846b1f5752db6bd1c26a35a47b9450b5a0e2e91b0fe1a9716245f29ca40cab2fefd0b1324b3f969658b33521df407a15900f4c9a257e398c10d9f092c008b237e2643e1e08de816773818bdfb3f0fe74c218db552390576c48737f011a94d5da5481f71711396d02f51add666aa7781f81f078ce1e12872dafd17d34b0a73a762eadd4aebdf807350af1d34372a89402581d1f8b6cc9d8e5e46f2b962c53315d5ea966ebecad798f0a10cc83af604df0bdea488ace9700803ab0053523e1cac9df34ec9c26e60a952965dbdc321ee2442ade83d0b7dce89f9e2b20f32e643e25076b4ffd7845badab7759aaf35bb500de30944d05deb73a654e7cfb6400ccbb35a5d64e0fb488a346980ba0bf8d27a66281d057c0186bb2f6feb0ad136164930625e5105eb0f38fbefac7e0820ae2a0e20e30507e53b23ced37b530df61e8e23ea49681cd7073a1a986d4f1c2846cf55af9b39fccdc3d82b1c1bd27ced456f3d66cebe4c93478fa5630c46d792d1e1543339c00206f77de4a8cfb999bcdfca2b175b906399c994b2b18539359f43438e98cdaa7853a2f195430174362d54697f29508aeaed3348526bdffdba5a4fe7f7bc1ebd75f17eefc1e23e26317e2b9fa6bf549139c3918301f36dd995725c6643ea312264799ed96083361f8e2c8dee7d3c001584ce5db032dec7cc2784cf97e70741e13850a1584b54b0b5b65347a0319c81259c3f21b1f132f2881ec6c655815c20c1eff8f0e8462696da5d531d0acfb0cfd2467c9164b369cafeb5d0fe0d5806f2c60b487ffdeffd65fcb28ff4a4e98cfdd9457b86cdd154b7e3caedf43ae7558224a8a1f7619838a4cf7fd3dbdd53b0cee28cd829959a9551c05e013e0b00204fe9be2e4cb8e1fb65a8eae43df1c134e46c1b41ad8dd6a7ede188ea36f56a3a63f5b5d1c345b58ca217f93e518b25f2c6dbb346d51a6516cee128372bc92b8804b5be8b34af90c5dad1084f302a3c89b325cebf6e81e4eccfa490e8f64b21a72822af4c5acf32d370a29a4cacc284e1bedfe05c70d3e46256899236c090468a4b8b724ea74394920a5df88ac61ce6906e2ddde5ca20626c2134652691486e1be50be4233fb1fcb14837bbf0818034c638ccf8c6038601abf2731c7c455125ae44909a13653102ee9abe2d2a0f2314b356e04e41034ab5658815227deff297e2c1de2720ff2d22b9246e33d7a9a79534ca631ff13c2bcb18f2a0b8424e420560c63af4139358f5859032f6644a6e6d5e7145c4cd6738a89e696dc9891e4c22a439fc5146656c5151fafbe7a7685aefb3a270cccd1bedee22cbbe40300da73ab12cc399771ef02680e94bce7da6693ffa464148f61aea12ad1cb273ea20845d6659b53cc62d532aa4a6695170a311528d379bbc68e10d70b81ca631ed903b6b429c3733835e1616e5d69ca6e6903fb997153678b596f9af648fb4b84862cdd9054de42f5cc59c12909252b280c647f7c2ad1edf85b641b56a8aedaa0856d57a65f89d4687af641947bb80afaa6ab28d35b3d95ee7c3a81fcaaab242ecc1f62a56a48f40efa95e9f662b4e687a2e118f19185e0d58e2e06025413334fa3d3af3c5f6aa6c10d9725261f35003c55d1e02c5430cb7957856c2b0745603f471a27550248c8e44bb47260e8b2bfdbe3df7d9207d7f67d81436b11945c5d9dbd24fb071d84b22b42eb41682e23b822c0d5157f9a3b9abc30cb9857841474d0c78a6897fe3f47f95bf0cd578460796b1ebf1b941d264f6da4403fb18962f4388660d4bc672ed7d8fbea69a12d005e49378b62e322e4f7e089db32ce5d70ed3c2bfcbc7ce4cc3c1ad6527cf8a459803e8629f478c3b1c938ddeaa88d235233ba8cbf7ef1fe55c5b2a44f925360d252a56daebb72945d8f9b76b83d67fc14dc7603aa13cd8c13618062b683a1a18a33d18f9b886987482751b100bbac0aa806509b28c2d74250c814d1aef91a85cfd23c68a61f13c82ef706f96eb1e44e51fcc491682bc5765dd101cc67b355d7e917013178665cc4062cd918f70bcbe23bda9ddb0c5eaaafea4a066f536efe577799d738367847ad4f84c5eeff9cd19339a8dd06e12c22e2497dd4f2bf23f25ab47ab977ad604fab5a8c1d6ce579b4ee61f90b4fe0e95f33e23ab6c36a555f6048dc6bbd355c0ee373fba896dacc955c12045e23aa3775b05c7c69d08c4441621a57c7a2befb60e0f95c9dc8787d4ec3cb972246cc005913167d2b0e1095f2f4b9693eeba2e7516bb91b54c37b5b131ec4f02ba92363e5360795c47cd8279bd0c683457aff448520f39fbaf0fcaccc9dec0fb9fd6d2bdd47ca3df3ab722ac4d235d113b41aa4eca82f492378ec04a2c9606f58a9bf4c7f9c9c9771fd3a022d9d584ba270ba3b87020b4b4e3c4d645e00fc18e320941dd0a5b915276e02ed6d7fc9c27c7ef4fef02f8fc0d8357555c2118bc63dabe872d7b15410915c1326bc069376feaee60d8052adc3d5595eeb2b37bbf3c1d39e036298743ed8d2df466267ae3ddcebcd72f1372a5fbcfa2f7beabbbde69a90b93c7993959f3e93d842fab91534c533392ad2b14a18ac3568e3c955d7ea1f520a55f9a027f2b78e96d001ae3d36b5e162611d806384226c4dc11f54e9f1f09fc05e4e804291173e2c1c89137c0d28b70b0785ca2de81fa0afa6840bbe03ae42377c29515d0e750d6cf451261d2b96e3f1e5ef8e10031bde53004d1705f05dd2330ca2416ee2ed730a4065741c06dd066532e1dc2c380e293aa2fe4279cf4f4d8387c79a638cae04c0ef05e933cda87fa9fda519cc0bc62729aef81586195ea540cb4040f8a391862e90db92e4c72fe3cbfb3b06a85a0aff0ef8740d03580766daab83dd23af8f3d0cb3c3154fbc243939fbc869c54d57cfddaa289d414b19e9497721dc8130cf0f682dd36155951ed00800eac9175b8d3d30a9d63462f23ba65f5b0c1c2e1e0b6c585a3e7dd09061cdb25a01542c455f9c074abf63a8488696cbc194ffbb1a478cc2ac22673154af26fbce42c27beb28f10ac2799b18da31d2ef81b7e14697b8abe4f1099e6385a56c3e985d22aefad7ee8abbb81cbe3f7162e34bf9050b3c112b7345f5078144dc00b984775c5dc2a569ce1d5e2a6548af00694a68e872f0b5e651d572c4c5", 0x1000, 0x8}], 0x44, &(0x7f0000001340)={[{@abort}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xdf0}}], [{@smackfsroot={'smackfsroot', 0x3d, 'ext2\x00'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@uid_lt={'uid<', r1}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@appraise_type}, {@fowner_eq={'fowner', 0x3d, r2}}, {@fscontext={'fscontext', 0x3d, 'root'}}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000040)={[{@data_ordered}]}) 05:32:25 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000100)={0xe8a, 0x27, 0x9, 0x1, 0x13, "5faca02d0580378815a357e1f3fb3bd267e99e"}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r4, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r5 = fork() ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) [ 2069.246240] loop5: detected capacity change from 0 to 4096 [ 2069.273545] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 05:32:25 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2847, 0x0, 0x0) 05:32:25 executing program 1: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000040)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r4]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) [ 2069.318667] EXT4-fs (sda): re-mounted. Opts: data=ordered,,errors=continue [ 2069.333376] EXT4-fs (sda): re-mounted. Opts: data=ordered,,errors=continue 05:32:43 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) 05:32:43 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x173000, 0x0) pipe(&(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000200)='./file0\x00', 0x400000000, 0x0, 0x0, 0x800000, &(0x7f00000000c0)=ANY=[]) 05:32:43 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYRES32=r2]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:32:43 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:32:43 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:32:43 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x33e868de84785cfb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x4, &(0x7f0000000000)=[{0x7f, 0x6, 0x21, 0x6}, {0x400, 0x5, 0x9, 0x8000}, {0x7, 0x0, 0x0, 0x7}, {0xc764, 0x7f, 0x3, 0x4}]}) chdir(&(0x7f00000002c0)='./file1\x00') syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) ptrace(0x10, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ptrace(0x11, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c77c0646e6f3d", @ANYRESHEX=r4, @ANYBLOB=',cache=mmap,cache=none,\x00']) r6 = fork() ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) [ 2087.692623] FAULT_INJECTION: forcing a failure. [ 2087.692623] name failslab, interval 1, probability 0, space 0, times 0 [ 2087.695284] CPU: 0 PID: 29489 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2087.696784] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2087.698595] Call Trace: [ 2087.699170] dump_stack+0x107/0x167 [ 2087.699963] should_fail.cold+0x5/0xa [ 2087.700792] ? create_object.isra.0+0x3a/0xa20 [ 2087.701784] should_failslab+0x5/0x20 [ 2087.702620] kmem_cache_alloc+0x5b/0x310 [ 2087.703503] ? mark_held_locks+0x9e/0xe0 [ 2087.704389] create_object.isra.0+0x3a/0xa20 [ 2087.705337] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2087.706460] kmem_cache_alloc_bulk+0x168/0x320 [ 2087.707459] io_submit_sqes+0x6fe6/0x8610 [ 2087.708388] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2087.709467] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2087.710525] ? find_held_lock+0x2c/0x110 [ 2087.711414] ? io_submit_sqes+0x8610/0x8610 [ 2087.712357] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2087.713407] ? wait_for_completion_io+0x270/0x270 [ 2087.714462] ? rcu_read_lock_any_held+0x75/0xa0 [ 2087.715474] ? vfs_write+0x354/0xb10 [ 2087.716285] ? fput_many+0x2f/0x1a0 [ 2087.717077] ? ksys_write+0x1a9/0x260 [ 2087.717906] ? __ia32_sys_read+0xb0/0xb0 [ 2087.718795] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2087.719934] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2087.721057] do_syscall_64+0x33/0x40 [ 2087.721861] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2087.722977] RIP: 0033:0x7f0bbbb8ab19 [ 2087.723790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2087.727774] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2087.729418] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2087.730971] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2087.732515] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2087.734067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2087.735613] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:32:43 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) openat2(r0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100)={0x30800, 0x60, 0x8}, 0x18) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0xb995}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000180)) r1 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fork() ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000440)=0x0) clone3(&(0x7f0000000540)={0x1110000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000280), {0x31}, &(0x7f00000002c0)=""/238, 0xee, &(0x7f0000000400)=""/44, &(0x7f0000000500)=[r4, r1, r1, r5, r1], 0x5, {r2}}, 0x58) r6 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r6, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c776625746a8e2b646e6f3d", @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,cache=none,\x00']) r7 = fork() ptrace$getregset(0x4204, r7, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:32:43 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3f00, 0x0, 0x0) 05:32:43 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xfffffef4, 0x0, 0x220028, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0/../file0\x00', 0x140) 05:32:43 executing program 6: r0 = syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup(r3) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000080)={@local, 0x78, r6}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r6}) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r6}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYRES64=r7]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r6, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:32:43 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4000, 0x0, 0x0) 05:32:43 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000040)=ANY=[@ANYBLOB="646174613d6f7264657265642c00997eb8c3ead4f6e90c08f2b8ba6e7dca2b9a"]) 05:32:44 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x33e868de84785cfb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x4, &(0x7f0000000000)=[{0x7f, 0x6, 0x21, 0x6}, {0x400, 0x5, 0x9, 0x8000}, {0x7, 0x0, 0x0, 0x7}, {0xc764, 0x7f, 0x3, 0x4}]}) chdir(&(0x7f00000002c0)='./file1\x00') syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) ptrace(0x10, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ptrace(0x11, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c77c0646e6f3d", @ANYRESHEX=r4, @ANYBLOB=',cache=mmap,cache=none,\x00']) r6 = fork() ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) [ 2088.032315] EXT4-fs (sda): re-mounted. Opts: data=ordered,,errors=continue 05:32:44 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="050000010001000000000000000000008fc1a0e0346da2657ed2c03759bf94775ac815db0895a7b3a29bc5b6d9b1512854781a56d470290a6f69cf7d9a16f5e3b1b7401e21e5f9fbc6ec32782d5be943931f17ed217b88bd0400000000000000d524079420873cc6a874f123a3e25c9aceaac29cbcbe86cbbc8c9798c91c3064b18039b7a092f9fe851b2128859add1ee22ee93ba086c411961389e14e814787b75fa8bd6576d36347393d0478985f66f068d15c60ea19b18a5ff6497ae37e1856ccb613e6dca9d43f4a329230aa24d549e818ad05d9917d2796d65c0ce06a2511daea0851681da5e59ef60e4e3ef69048eea8c9c35d1ea0ee7b6494a55a0ad4e542ce55c58429eb1879aa3450e6f4824ce0b5406ce02f592d1daac53636bf59", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) [ 2088.051452] EXT4-fs (sda): re-mounted. Opts: data=ordered,,errors=continue 05:32:44 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat(r0, &(0x7f0000000100)='./file1\x00', 0x220100, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x10000000004307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x397a}, 0x0, 0xa, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="5c497c48bd01009af17472006e0400", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap,cache=none,\x00']) r4 = fork() ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:32:44 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) 05:32:44 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x10000000, 0x9, 0x0, 0x800800, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) execveat(r0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000300)=[&(0x7f00000000c0)='ext2\x00', &(0x7f0000000180)='ext2\x00', &(0x7f0000000240)='ext2\x00', &(0x7f0000000280)='@\x00', &(0x7f00000002c0)='ext2\x00'], &(0x7f0000000380)=[&(0x7f0000000340)='ext2\x00'], 0x1000) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000080)=ANY=[@ANYBLOB="123fd80aed9558018677d1ba6a0b10facb32a898de6ba1ca81a516660b9400f249b56960f03dbfcf5b2d883d7656967444b66de03f19"]) [ 2088.268539] EXT4-fs (sda): Unrecognized mount option "?Ø [ 2088.268539] í•X†wѺj úË2¨˜̃k¡Ê¥f ”" or missing value [ 2088.280299] FAULT_INJECTION: forcing a failure. [ 2088.280299] name failslab, interval 1, probability 0, space 0, times 0 [ 2088.282795] CPU: 1 PID: 29845 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2088.284130] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2088.285731] Call Trace: [ 2088.286247] dump_stack+0x107/0x167 [ 2088.286944] should_fail.cold+0x5/0xa [ 2088.287675] ? create_object.isra.0+0x3a/0xa20 [ 2088.288551] should_failslab+0x5/0x20 [ 2088.289277] kmem_cache_alloc+0x5b/0x310 [ 2088.290067] ? mark_held_locks+0x9e/0xe0 [ 2088.290844] create_object.isra.0+0x3a/0xa20 [ 2088.291689] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2088.292664] kmem_cache_alloc_bulk+0x168/0x320 [ 2088.293545] io_submit_sqes+0x6fe6/0x8610 [ 2088.294373] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2088.295330] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2088.296263] ? find_held_lock+0x2c/0x110 [ 2088.297047] ? io_submit_sqes+0x8610/0x8610 [ 2088.297879] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2088.298809] ? wait_for_completion_io+0x270/0x270 [ 2088.299736] ? rcu_read_lock_any_held+0x75/0xa0 [ 2088.300626] ? vfs_write+0x354/0xb10 [ 2088.301339] ? fput_many+0x2f/0x1a0 [ 2088.302048] ? ksys_write+0x1a9/0x260 [ 2088.302777] ? __ia32_sys_read+0xb0/0xb0 [ 2088.303552] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2088.304555] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2088.305540] do_syscall_64+0x33/0x40 [ 2088.306254] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2088.307230] RIP: 0033:0x7f0bbbb8ab19 [ 2088.307933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2088.311459] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2088.312904] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2088.314266] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2088.315621] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2088.316980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2088.318359] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 [ 2105.301232] EXT4-fs (sda): re-mounted. Opts: data=ordered,,errors=continue [ 2105.303925] EXT4-fs (sda): Unrecognized mount option "trans=fd" or missing value [ 2105.336508] FAULT_INJECTION: forcing a failure. [ 2105.336508] name failslab, interval 1, probability 0, space 0, times 0 [ 2105.339014] CPU: 0 PID: 29965 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2105.340481] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2105.342257] Call Trace: [ 2105.342825] dump_stack+0x107/0x167 [ 2105.343606] should_fail.cold+0x5/0xa [ 2105.344419] ? create_object.isra.0+0x3a/0xa20 [ 2105.345389] should_failslab+0x5/0x20 [ 2105.346198] kmem_cache_alloc+0x5b/0x310 [ 2105.347072] create_object.isra.0+0x3a/0xa20 [ 2105.347999] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2105.349077] kmem_cache_alloc_bulk+0x168/0x320 [ 2105.350051] io_submit_sqes+0x6fe6/0x8610 [ 2105.350964] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2105.352022] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2105.353047] ? find_held_lock+0x2c/0x110 [ 2105.353912] ? io_submit_sqes+0x8610/0x8610 [ 2105.354839] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2105.355860] ? wait_for_completion_io+0x270/0x270 [ 2105.356888] ? rcu_read_lock_any_held+0x75/0xa0 [ 2105.357874] ? vfs_write+0x354/0xb10 [ 2105.358666] ? fput_many+0x2f/0x1a0 [ 2105.359436] ? ksys_write+0x1a9/0x260 [ 2105.360245] ? __ia32_sys_read+0xb0/0xb0 [ 2105.361111] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2105.362227] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2105.363320] do_syscall_64+0x33/0x40 [ 2105.364110] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2105.365191] RIP: 0033:0x7f0bbbb8ab19 [ 2105.365977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2105.369917] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2105.371539] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2105.373053] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2105.374570] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2105.376079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2105.377593] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 [ 2105.395395] 9pnet: Insufficient options for proto=fd 05:33:01 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x33e868de84785cfb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x4, &(0x7f0000000000)=[{0x7f, 0x6, 0x21, 0x6}, {0x400, 0x5, 0x9, 0x8000}, {0x7, 0x0, 0x0, 0x7}, {0xc764, 0x7f, 0x3, 0x4}]}) chdir(&(0x7f00000002c0)='./file1\x00') syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) ptrace(0x10, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ptrace(0x11, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c77c0646e6f3d", @ANYRESHEX=r4, @ANYBLOB=',cache=mmap,cache=none,\x00']) r6 = fork() ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:33:01 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="050000010001000000000000000000008fc1a0e0346da2657ed2c03759bf94775ac815db0895a7b3a29bc5b6d9b1512854781a56d470290a6f69cf7d9a16f5e3b1b7401e21e5f9fbc6ec32782d5be943931f17ed030088bd0400000000000000d724079420873cc6a874f123a3e25c9aceaac29cbcbe86cbbc8c9798c91c3064b18039b7a092f9fe851b2128859add1ee22ee93ba086c411961389e14e814787b75fa8bd6576d36347393d0478985f66f068d15c60ea19b18a5ff6497ae37e1856ccb613e6dca9d43f4a329230aa24d549e818ad05d9917d2796d609000000000000000851681da5e59ef60e4e3ef69048eea8c9c35d1ea0ee7b6494a55a0ad4e542ce55c58429eb1d79aa3450e6f4824ce0b5406ce02f592d1daac53636bf59", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@local}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:33:01 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x0, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:33:01 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:33:01 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file1\x00', 0x7f, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000180)='./file1\x00') mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000040)={[{@data_ordered}]}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0), 0x23060a2, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c6163636573733d616e792c6163636573733d636c69656e742c00c50034f8e626483f5bca4fc31e7a5af18be6b39292a096a74285d37fddaa9ff75c1dddbef9f752efc5c514bd05f56a9b9a0de43fed294d91d014057f317abf7d06597077da3babf9a5e6f82667316bae5e7213294be31e14443dd7be07962d451478df172c07b2022e48bd3e7aec96f2b58f3571a0bbfa8acc59a586a08a4d33fbfdc4cdc9e3c87421ebb5"]) 05:33:01 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) 05:33:01 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file1\x00', 0x200007, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/227, 0xe3}, {&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000001c0)=""/73, 0x49}], 0x3) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c63616368653d6d6d61702c63616368653d6e6f6e652c04"]) r4 = fork() r5 = fork() ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) syz_open_procfs(r5, &(0x7f0000000240)='net/hci\x00') ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:33:01 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4428, 0x0, 0x0) 05:33:01 executing program 5: syz_80211_join_ibss(&(0x7f00000000c0)='wlan0\x00', &(0x7f0000000100), 0x0, 0x2) mount$9p_unix(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x301082, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000040)=ANY=[@ANYBLOB="00000017b15486bc00000000bda6"]) 05:33:01 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x33e868de84785cfb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x4, &(0x7f0000000000)=[{0x7f, 0x6, 0x21, 0x6}, {0x400, 0x5, 0x9, 0x8000}, {0x7, 0x0, 0x0, 0x7}, {0xc764, 0x7f, 0x3, 0x4}]}) chdir(&(0x7f00000002c0)='./file1\x00') syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) ptrace(0x10, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ptrace(0x11, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c77c0646e6f3d", @ANYRESHEX=r4, @ANYBLOB=',cache=mmap,cache=none,\x00']) fork() 05:33:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f00000000c0)=ANY=[@ANYBLOB="6461746172646572a8e065642c000000"]) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) [ 2105.455287] EXT4-fs (sda): Unrecognized mount option "datarder¨àed" or missing value [ 2105.470033] EXT4-fs (sda): Unrecognized mount option "datarder¨àed" or missing value 05:33:01 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:33:01 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x33e868de84785cfb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x4, &(0x7f0000000000)=[{0x7f, 0x6, 0x21, 0x6}, {0x400, 0x5, 0x9, 0x8000}, {0x7, 0x0, 0x0, 0x7}, {0xc764, 0x7f, 0x3, 0x4}]}) chdir(&(0x7f00000002c0)='./file1\x00') syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) ptrace(0x10, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ptrace(0x11, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c77c0646e6f3d", @ANYRESHEX=r4, @ANYBLOB=',cache=mmap,cache=none,\x00']) 05:33:01 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4528, 0x0, 0x0) 05:33:01 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x0, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:33:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000240)=ANY=[@ANYBLOB="6474613d6f7264657265642c00493ce941bda4712f37f1a039cf306db3089bb162123ac400451d0ea7fc35ed079155f45c2882fb535a5b4f3e03065cc568554a386635324bb29a5b6401dfcfa8b3982313a2665431ffb0c8287f6e923450"]) [ 2105.606044] EXT4-fs (sda): Unrecognized mount option "dta=ordered" or missing value [ 2105.624163] EXT4-fs (sda): Unrecognized mount option "dta=ordered" or missing value 05:33:17 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x33e868de84785cfb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x4, &(0x7f0000000000)=[{0x7f, 0x6, 0x21, 0x6}, {0x400, 0x5, 0x9, 0x8000}, {0x7, 0x0, 0x0, 0x7}, {0xc764, 0x7f, 0x3, 0x4}]}) chdir(&(0x7f00000002c0)='./file1\x00') syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) ptrace(0x10, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ptrace(0x11, 0x0) 05:33:17 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) 05:33:17 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="050000010001000000000000000000008fc1a0e0346da2657ed2c03759bf94775ac815db0895a7b3a29bc5b6d9b1512854781a56d470290a6f69cf7d9a16f5e3b1b7401e21e5f9fbc6ec32782d5be943931f17ed217b88bd0400000000000000d724079420873cc6a874f123a3e25c9aceaac2f7bcbe86cbbc8c9798c91c3064b18039b7a0721cfe851b2128859add1ee22ee93ba086c411961389e14e814787b75fa8bd6576d36347393d0478985f66f068d15c60ea19b18a5ff6497ae37e1856ccb613e6dca9d43f4a329230aa24d549e818ad05d9917d2796d65c0ce06a2511daea0851681da5e59ef60e4e3ef69048eea8c9c35d1ea0ee7b6494a55a0ad4e542ce55c58429eb1879aa3450e6f4824ce0b5406ce02f592d1daac53636bf59", @ANYRESDEC=r2, @ANYRES64=r1]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:33:17 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = fork() ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:33:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file1\x00', &(0x7f0000000240), 0x10000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f00000000c0)=ANY=[@ANYBLOB="64707461b4bb5b7a03e45d986f07b53f2d6f726465726503e180"]) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) 05:33:17 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4628, 0x0, 0x0) 05:33:17 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:33:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x0, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) [ 2121.591889] FAULT_INJECTION: forcing a failure. [ 2121.591889] name failslab, interval 1, probability 0, space 0, times 0 [ 2121.594184] CPU: 0 PID: 30316 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2121.595424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2121.596902] Call Trace: [ 2121.597376] dump_stack+0x107/0x167 [ 2121.598026] should_fail.cold+0x5/0xa [ 2121.598705] ? create_object.isra.0+0x3a/0xa20 [ 2121.599516] should_failslab+0x5/0x20 [ 2121.600194] kmem_cache_alloc+0x5b/0x310 [ 2121.600917] ? mark_held_locks+0x9e/0xe0 [ 2121.601638] create_object.isra.0+0x3a/0xa20 [ 2121.602411] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2121.603337] kmem_cache_alloc_bulk+0x168/0x320 [ 2121.604150] io_submit_sqes+0x6fe6/0x8610 [ 2121.604909] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2121.605791] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2121.606653] ? find_held_lock+0x2c/0x110 [ 2121.607376] ? io_submit_sqes+0x8610/0x8610 [ 2121.608146] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2121.608989] ? wait_for_completion_io+0x270/0x270 [ 2121.609846] ? rcu_read_lock_any_held+0x75/0xa0 [ 2121.610681] ? vfs_write+0x354/0xb10 [ 2121.611332] ? fput_many+0x2f/0x1a0 [ 2121.611978] ? ksys_write+0x1a9/0x260 [ 2121.612652] ? __ia32_sys_read+0xb0/0xb0 [ 2121.613372] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2121.614294] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2121.615221] do_syscall_64+0x33/0x40 [ 2121.615880] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2121.616784] RIP: 0033:0x7f0bbbb8ab19 [ 2121.617427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2121.620627] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2121.621968] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2121.623217] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2121.624458] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2121.625691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2121.626932] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 [ 2121.666666] EXT4-fs (sda): Unrecognized mount option "dpta´»[zä]˜oµ?-ordereá€" or missing value 05:33:17 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x33e868de84785cfb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x4, &(0x7f0000000000)=[{0x7f, 0x6, 0x21, 0x6}, {0x400, 0x5, 0x9, 0x8000}, {0x7, 0x0, 0x0, 0x7}, {0xc764, 0x7f, 0x3, 0x4}]}) chdir(&(0x7f00000002c0)='./file1\x00') syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) ptrace(0x10, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ptrace(0x11, 0x0) 05:33:17 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/286, @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) [ 2121.695889] EXT4-fs (sda): Unrecognized mount option "dpta´»[zä]˜oµ?-ordereá€" or missing value 05:33:17 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x8001, &(0x7f00000006c0)='./file0\x00', r1, &(0x7f0000000700)="61e52beba6de9080da8fb49a3d2e937b7f7613af1c2ffbea4775800de311520097d7a28a4079cd166b889b8de2192a615282054064969ce0e5acb58b25af") setresuid(0x0, r1, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x6, 0x5, &(0x7f0000000880)=[{&(0x7f00000002c0)="61401e6381d49d7968b6908e09d746fb9052841bf672f57dbb904b4373159f280c34cb7963d7ede44310e48956a20152b2b16c288ddc97094bb0ad35899f33fc6ce7d06574d9283717f06fad5e55a10d21669384a24c4e7030b89b2e7962ad137594c2807d151469fefdcc2a4cd7427f7730e4ac65778b53472338abf4ac292cf9a819614f9d3d04ac9dab677a94ba", 0x8f, 0xfffffffffffffffb}, {&(0x7f0000000380)="4fbc67dc6ce6413ffe2b95f6fc0f0612c795dabeb621cab7ac6a14b8a381d997b3020ee6a4a6958723ec4b22312aecb21f4e5c795ef0477538ad54d2195e6d5d75c79dbc05f3db2461e21b6eb22a5434483512d4d2c6b18148efd8ec6b02217f4f09f56c52ac482134ecea59a5c52e39fb8dd669b32de94c214e43eea61aff16e6cfb03598c1a69956475fe264", 0x8d, 0x6}, {&(0x7f0000000440)="4eb54b4b1b9b79d14e53c22cc68248e58cf445ab8df7a9507644ec11c7c9aa03b024e4aa9f1dfe8fb006d837f0891c25031db04fb9a1a4afcf6ee41cf2e25ff08dcfb231dd81299c5e7e7e9006a948537238f3d3776c7fc139a1c2a00e4e9a7d94fb32af3088be116eac87037237f84f45c2df969a327e5b28d21b8ef4a4ee668d350fc0ae9160e51d99222fd62fa0c0441191f7cdfd3f2b5c919a7c16febcb3128ad6bc76d8b640b7710763c77b0154cf420df487850ae5b0111985c8177c59187ff6c081f9522d23f11366bb8743a8bd32e8cdde582032f8caf3e946f5e8ed117147dea4f83ba9", 0xe8, 0x10000000000d0}, {&(0x7f0000000740)="31ee925600727c1e6c7e031b63025dbe", 0x10, 0x5}, {&(0x7f0000000780)="8655dc61ee11ce1cfdaca155f5fd7b5b0570bc85486f90871e1cdb00a55104814b9a5a1bdb12626aeaecb4ffe0a8e6f0a0c363cf174f44e3952b71ca64f7a0fccfd6ed11f0bd6f197d9a259e90921534b04e189ba1973fa06e9e53064a9ee7883a637e7e587de55114e1acfcb9f664365105cd93b6fd7f2a62b4d84b393b4ac00b2912416f4edba10097f2929ba6fe5ff3bc89056ac67723dc647b85f56d3646b0e053f4b8a50070a395742d77db043f736a380ab7ca0a67a0500577bd4884c220544a0961ef673edb1836e068b584d4b24a4f581a4420b2aa8e62d31cc426cf3fe5cb19809e2b451644839f372b873ca5a22f9661affd260996ef18", 0xfc, 0xfffffffffffffffa}], 0x0, &(0x7f0000000900)={[{@data_err_abort}], [{@uid_gt={'uid>', r1}}, {@context={'context', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fsname}, {@obj_type={'obj_type', 0x3d, 'fsmagic'}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@uid_lt}]}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000040)={[{@data_ordered}]}) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000180), 0xa8090, 0x0) 05:33:17 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) 05:33:17 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4728, 0x0, 0x0) 05:33:17 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78, r4}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r4}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r4}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r5]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r4, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) [ 2121.922325] FAULT_INJECTION: forcing a failure. [ 2121.922325] name failslab, interval 1, probability 0, space 0, times 0 [ 2121.925086] CPU: 1 PID: 30506 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2121.926562] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2121.928298] Call Trace: [ 2121.928858] dump_stack+0x107/0x167 [ 2121.929625] should_fail.cold+0x5/0xa [ 2121.930430] ? create_object.isra.0+0x3a/0xa20 [ 2121.931403] should_failslab+0x5/0x20 [ 2121.932202] kmem_cache_alloc+0x5b/0x310 [ 2121.933064] create_object.isra.0+0x3a/0xa20 [ 2121.933980] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2121.935065] kmem_cache_alloc_bulk+0x168/0x320 [ 2121.936031] io_submit_sqes+0x6fe6/0x8610 [ 2121.936935] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2121.937982] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2121.939016] ? find_held_lock+0x2c/0x110 [ 2121.939877] ? io_submit_sqes+0x8610/0x8610 [ 2121.940788] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2121.941808] ? wait_for_completion_io+0x270/0x270 [ 2121.942832] ? rcu_read_lock_any_held+0x75/0xa0 [ 2121.943805] ? vfs_write+0x354/0xb10 [ 2121.944584] ? fput_many+0x2f/0x1a0 [ 2121.945352] ? ksys_write+0x1a9/0x260 [ 2121.946149] ? __ia32_sys_read+0xb0/0xb0 [ 2121.947010] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2121.948113] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2121.949201] do_syscall_64+0x33/0x40 [ 2121.949978] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2121.951065] RIP: 0033:0x7f0bbbb8ab19 [ 2121.951846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2121.955716] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2121.957325] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2121.958825] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2121.960343] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2121.961825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2121.963329] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:33:18 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x33e868de84785cfb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x4, &(0x7f0000000000)=[{0x7f, 0x6, 0x21, 0x6}, {0x400, 0x5, 0x9, 0x8000}, {0x7, 0x0, 0x0, 0x7}, {0xc764, 0x7f, 0x3, 0x4}]}) chdir(&(0x7f00000002c0)='./file1\x00') syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) ptrace(0x10, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:33:18 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000040)={[{@data_ordered}]}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x104008, &(0x7f0000000240)={'trans=unix,', {[{@loose}, {@loose}, {@nodevmap}, {@version_9p2000}], [{@euid_gt}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]}}) 05:33:18 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x36}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:33:18 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x33e868de84785cfb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x4, &(0x7f0000000000)=[{0x7f, 0x6, 0x21, 0x6}, {0x400, 0x5, 0x9, 0x8000}, {0x7, 0x0, 0x0, 0x7}, {0xc764, 0x7f, 0x3, 0x4}]}) chdir(&(0x7f00000002c0)='./file1\x00') syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) ptrace(0x10, 0x0) [ 2122.086507] EXT4-fs (sda): re-mounted. Opts: data=ordered,,errors=continue 05:33:18 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4fea, 0x0, 0x0) [ 2122.100976] EXT4-fs (sda): re-mounted. Opts: data=ordered,,errors=continue 05:33:18 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x1972}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r4 = fork() ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:33:18 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000040)={[{@data_ordered}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x28000, 0x20) 05:33:18 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/288, @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) [ 2122.249038] EXT4-fs (sda): re-mounted. Opts: data=ordered,,errors=continue [ 2122.267994] EXT4-fs (sda): re-mounted. Opts: data=ordered,,errors=continue 05:33:34 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4fec, 0x0, 0x0) 05:33:34 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) 05:33:34 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:33:34 executing program 4: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x404202, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {0x1000}}, './file1\x00'}) pread64(r4, &(0x7f0000000040)=""/55, 0x37, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/55, 0x37, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000280)=""/101) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r7 = fork() ptrace$getregset(0x4204, r7, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:33:34 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x33e868de84785cfb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x4, &(0x7f0000000000)=[{0x7f, 0x6, 0x21, 0x6}, {0x400, 0x5, 0x9, 0x8000}, {0x7, 0x0, 0x0, 0x7}, {0xc764, 0x7f, 0x3, 0x4}]}) chdir(&(0x7f00000002c0)='./file1\x00') syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) 05:33:34 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="050000010001000000040000000000008fc1a0e03c6da2657ed2c03759bf94775ac815db0895a7b3a29bc4b6d9b1512854ddbf31aa289de04669cf7d9a16f5e3b1b7401e215ee5f9fbc6ec32782d5be943931f17ed217b88bd0400000000000000d724079420873cc6a874f123a3e25c9a511aacceaac29cbcbe86cbbc8c9798c91c3064b18039b7a092f9fe851b2128859add1ee22ee93ba486c411961389e14e814787b75fa8bd6576d36347393d0478985f66f068d15c60ea19b18a5ff613e6dca9d43f4a329230aa24d549e818ad05d9917d2796d65c0c04000000daea080ff41da5e59ef60e4e3ef69048eea8c9c35d1ea0ee7b6494a55a0ad4e542ce55c58429eb1879aa3450e6f4824ce0b5406ce02f592d1daac53636bb590000000000000000eccf1b57831529abe46fff7a5a04a918a7cf6d403ff3ccd7c8a6e285053c787738b868f216e7010d4f885917f0d7d5d7c87d3ce80fb7726edecbd8a9588cc7ba47d3be558e4616130c73ee48c684075a81ddd7fc621ed6b8aadf234243400bf652dbe7a82a8a61cedd5ab514bc1d63b2fce615a2f611da75ce17fcecac665c5cb958a6322586d8c9b9fbe1a220135a4114d7390c049d712eecbf11bf1021d1b4ade9eefc6c73cde002bcc22f8a3f916b9f16dc0fea024995c7b272c5d6280cdd1aa2ee4961de0d9a812fc2171e307e7a96614060b3b5ce6fd4471f713ea7716a03bb3c0ae66f00000000000000000000000000000000192afeb7d797f370a04a4b6942f5cb11ed84000368230755ed12be7b9b189a4742c9be79c053d417337cd2a5ecf57f8dfc93fa7cc0fc4ea0827e68f3503c6ecb52ad3465f1c6c4acaf9986cda535c82e01ed81a62aaced8455330b4aa8931a68b6fdbc0403ee0e370f126030b20539f2e2a5070d4c20bd55c9edb08bef72a2c8345a2decef533575dd77ee2296ac1f152bd70edce5bd956f502f500dac5e253dc8bb0c8002e853743cfd1e7182861617d6bfbf2db7715399ad156a71cc", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:33:34 executing program 5: ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000240)={{}, "08eb1555e03200b873b66bd97eb9a026dd1967d883bd0f6df7ec464852ee88ed7efd57d73f0e3ad86feec1c2f2e40b59e77a731b245cb108f0ed040c332fe6ccfc9bcd117d8c71511e0e40cf32c4f5b129f0817884ca347b963a14f554b3d6206a81ce15339a3681bf001d9f99c07cc2011d5772e38432af70f1649763382a6b9721155f44b1a54ad5f756fe670b83001ffc42e04161f22e7e83d1115c790cb036ea6ee03a83dd86e5dab3d91d4cf384cdd84999c1d5505eb906094aaf348b7070207b8591f8a566ed211e749961e1f06f75265448cf4e5ad62103c285d7c8275c9dcccfad5c023e34733024ce56682fc5d50b2a70ffb2b9966252c12f1d1297dea63ba6bf5b0e36b605490fa0e3b58e23a9e7e42bcd43f175e3cfe873a35830b9f24e18269b59b004368cb5e6a6f5d38b6586923bbe8d93565540d5a39ee1c44f4cb1c421f2ef6805701867c00c7b1f07475cd83a8fcee1a0faaf416725579157275074350dd09e420d5ef059d039cc8da0c87ef6878fee26c070c1350eeef39d055ccbdc1b8ee97a7a5805e869b0e8b31ce436b38ebb073a3c3632179debebb5a4d1f42a91b90c739e367ca0bf4d29755db9adc5059d5e241120c91ea1eb2bb05415ef3bf06bb20eb72d12e19f4d37722048fe2ff186273cdea518a59ae90690c5770d7960e249905a9b63a5d5bc2f90fc73b910535d313c836bcd729afa7042ebf55074fcd7ac7acfe198ba498cc19645cab5480be52df86b50a4d80ae499b8f19cd9d2979296d83abb065aa50279a1832fee951c613c590ae8071c6f1ac65d6a3c2b2a19428d7b2d98a8e85ad4a10f5548a9034059afce80e58a52ea38840b1d9d3c0a3a4841970bd32dfa074b34aabeffd332447ac88b8955b0dfe2bdb7cae578078c3060ffdde88362a64067d56e112181278e247ed77f868c34cf35ac83812d61c325e0d9157b0c68f70c4f15dc371d55bf5f0d4f4787938a3077dfb7aa4373ed48fb875d5f42b1b98a9a63ec4907c6f9736ea0dba3734e914b0b0be559887f8cb0d53b5c1f93dd0c23299b0902d2a5b96f6b8f60cd616cf7dcb286f319ffdcad3ceed9430cef5c8819661ec7498c84b726c55b91b3841a90cd46bafce212ca5baeee72d24f16dfea05b9fa540fde45e4a821f268b8dbfd41de22cc5e176d53dd4b985b96b08a2fb65d859edf9c6994ac2addd3d8efcdefc8c6fbf2b3474bfb0804117610b5188f856e08785b2df201c80a4e2bbd2467f347d152370426f8d6266f8cf57fff173e3b57d4b5491d5078b3c619c4b6541dbd27008705b7211fd6427316f62aeeefe64698b0ef3df4e05967f1910780d4c4bc748d4e9ea73c2cac526390fe4f5da578ed5a6a436d5872c16974d7eaad1dcf03e6c8788e01f1a5d2a21402571a56fc7837fafbf3bf013dbe331b6bdd759955c5f4aa0f1451aed3c7d04a287802ff03de0db729dbfb51d3ada2b3da4dfe542db97a290592ce1b5f7cc0a891786948e097fb301a7d2d1c2b11fa4c3515aeb1f42e8584eebf8a1a86ecbe458a6b82c3533ea2169a515d5a8a266330a8c998191c58a15157f6e1ca91ba09a9018a4ea8d166a91152bd88f812004413e93f6e7c05bc688f52a1314dcaccd4609ce403f8e06d4decd3ccd98856e76c43d1c84f8ae71e5bab719b13b4597ba2cd08a63fe4edc6a682d528150d6ac9d982cdc6c5aad47a3830d034fa5a911d63a239d39f8ba8f2b77bd88248653c00df96de5889d8b25657cf18210d53d07a4d9ad4d6c796a132aa272f4dfc131227f93139802f99dd88ad0630a877402e9e8159fb45f2f0a6bdbd01f924f189cb2987305778bf8a938d0e8497e1863ec4c0f59e3a37ac4106e743158df2dbd6e158f02e486d1cdd9771e2073bffd6b59cb8c1cf889135428f0151ae20f7c25dc0405b2ad5eb38e42f4b1a549c8d6a5c363863520aebd68875a472086f1f406e4f48e0ce04923dd2c26234f0cc4f9f9bc26eaf3285bc8e855befc12189a7b00f92ae74f553049cdff5214b70b832e446db3433049f6779dab99e7ce04950377c4806a67fa0e0960cd3b58ca2748870600972ceebf8dd7bdd3a59e840a92c62ec5c5a27b1cef7f8067fefc40ab3dda9413c63706b8c5d58a117eead2c85613f5ecb8440675e8b2be553c833312ce76f1ce9549b1027636f1f7f24215df66e9c5899969013607b1ab7ad1a4b0b9fa0611e351d8c182fa7d6640280e878c8043af9002d34cc88e8557c45ecafbba38fe481a9846df28662c41855ce6cddfbfa011473d0d32dacfe2a8a0884ab61c372a59625908a84a2d7eb3bc23d02443097de3d09d8eb3d9f09400341f0ce779a3e3a9fea0ff072466edb1e69be924e6df96ccaacbcbae448336d83b3e174afe114c137fc51f4ff61d5c8f01d9838e6c1168c6f6d3e65dbce378095325befd3d62b1bc93752afa809ee8867727dc6df5ffd8183614e85b72a6759809aa2e93be2da792cb830bbc496d2efd973ccdc98d78c650028a9a64134dbe73fbf72991fc7981598da6d51490d9d6f18abfa4b095a42f5d9e6c2d768d6ec0e4399b855f192f0c82e75fc39cae6ff07c2aa6596248ee8069e1f14b46a71b97f88bb594f009ad6580a744dc709a3507ef7afef14df09a0a2f7a8a2b5a672b5fba1a102d59d85733a2fb3f529ce739feed048c585a485b5fb71bfadc1e2fd61617ec9d1c19926b7d6a2feff7726754c4a46ea85065c6976141cf8db3e39e0634b72904bc5ce4e44ae08836d8c43767d76fd84058f95a7a3728177577bc9eb99b9f83b38edd4732c72c3a8d0916fc7a5bff63aa4635ef216996a121720b33a46c14bc9a66d932eff9844f111800a74b9ecb5705bc373e392ea0cdb2d260ec933b1e4fbbf3d95cabcd340345bae45a8adb5a1dd3b53e370ff155e9f80edf129a4aa42cd379cbf92cba3fe4bb4aecf4551ca489d82f9fe1ef4dc25889dae07c1df0686b26e704a01382942018f8040c8c95a97776886d462d934238eb4b52594ce36d1bfe32040c678bd8c4c44b2dd0ae2d47bc5c25fcb0b22cbd4c643088a4a8d569ceb93d12544e6d3318e4cc5f089d3c664feb149899e60b0d6d033ccff0ecbc88f339941a9ec4ef7bda165cdc49ba47ca041fc29c1c84f5822d9569b3941a1087e812f6653074d3a971202dc1da0d6d57c353d7c1d6c526a7c9c940e307908a901e7091cfe9d2db6847a028a672216652a095cf5db8c9aca4401acf5c93ee13ca096e50ba587a4cae65dcf2c88e49123ce7d33a5ffab572b407f99377d7d2942e8fccc0f2a0e8bc84cb14e28f6e0b20b1cc09416fbbc134e044cd16bd8379fd264eb86bedbd997219555446144d9b0b879538e0748d7663952eca8d0b41cb0091a0a11874d6d78720f91e0fec3c304e7e1cb0bec7b83bc51a34f23ac89ca19266e331ab4f1bcd45040d0ff0def8a514f000281b75f0d4a85f24643b637a9095c81bd4eb2e45ff66b2423973c6f508cc2787e47784a4a8e45a060560c3f7a97451da3169aaf34037f0b1802250ed83072504306d3ec0802befa45d3e4d97f02549e4df6d7a2d542f5687b13ba837dc34e9386ed658674b149ae5fb83c6acb6d88f576cf2a441f3ba34db18def6c47b5dfc1a6267ab348fa25413ed99817219e895f066a08192b1e1ad4101009ff223c207c8d602b0241a7f6da64d202633da2fdd5c32d2745fb54573f16cddcdf91245442c0aff9a16dc3a4fdc27c532a778a95b3389023d104aaa76dae9aed7961d251e6555df4f74d82d7118f7fd127676d46b41968ca7e4626ba9d57fdf3f2da9462c3f02c19d3e699f9d9de7f07cecf90d7026f72cbb998378d8681c6837f0004a0d3ea432315bd941afad9d9bdd13e865e825b9f883fc2071b91e4133417224f120be003e2a5d200d7464f218d6f9b2ecc5de4152c18d3db334d460bc46dac45675350968075038518c69b4713c84f4653822dc79751d46c6fea142c7dd70e470ec9f1a090f394775e7ca34dc6310d4f3360f00d798100839238441af739edf61abe9c8388746c969ab7681f418307cb3d0886a95fc82ff72c71ddee392479a2cd0732b908b4dfc59858ec0c971bc1cec5eb27cb54814538aa02ccef0437bb9b5912e6de8fcf2930eb2607e6186aa3a4ba4eb36588028315ce885fb875b2da738a064830638792952b076fc3d52a91acf94d4aae07f26b082e4f1e3fc3e07f870a2a9076baa320d18a7a2e527aa02f091eaae47191918d2fa3abdad79c80d525682a8d481b0bfb14ab6ab4909cff3148bd462595f59e7a2240a8455c1117c0eb2fcedf9b743a6358ce7990fd426e7608c725a2037adf6b6eaa3c5dd8b7645512bed2c9a611e1e01a0cd041216cf86e5464b1e08c4fc4f71483777fc85b9f617f9f7767c4f98284bf7dd70c28f3763c429567b473265db662ff16ca22a3be46565fc4f5eb30d47a79a68b2919590591029843d65dfd27f082134ae6dc78ded0a08f6b11a17e9d7b6b79e8db650726d645fa607deff7bbed4304fc3611e53aa7c42147afdf67c9aa79f0335a611cb355d8494d3470755fdbe9d441d54ba3674ee5efb9fd445075b60f05f1cb71693b6b143b42bab447be4dc73f38141cccdc7280f07408d969de136541332aacff04ee1bda819258c66132b6b10267a7827793930cae723e68dc3773fc1e274d2be0a798ed9e41ab550d71f0de5040147c437317dcb169c6183874856883151ba9f6ebb4951a7151e5d4e9fcabf1e376398e47815f45b5c33121c4ce5ad2980c38f6ce2edc848c93ddcc5eb80cc3e2d1969fbca395e6fe34e929e3ce289b5edeebf2049ad98c8c8c3d0541ea64bbb8a7f1684c9fcc8ae46650919f4ffeb697ad0d852d04017f788b237f200da4bd02d29ff51df00397e30563635188fb6c1b7794ed06e5cca7f10fa897c1d7ebce229485955622df7b073c2555247442c14d6c67643513d0178551c696ad6111d2e1d0a925d7c42721214a8370ef39ed461e2d8770802ccfa4d990dcedf4e2eea1eba05fd977782223b2f6df58f65dbe20c63dd214238de0575d7a31d3e466c21b5eeb2dab67b2c27e14fb4e75defb6b0da3bab4ac4c91c1c023fa57a6681731435bb29c7e1b53de23628c5de1e894665f8180756ad705c785dbaa62ab440577a02fa924f8e2fdfdbc2001cd40242c329dc1243f0da883c938e9791454978d0a867315424105c36ca2339e6e1e1f4ebaa6dc249f60bcb151ad16342b48a623c67d7ff34c6e05cd7b6844720da73e9de5b0e6f649dc37b358b80b096319c5509ec68fbe36db4466a9c19321e32310676215e77b991798ee65b5d8056415d837bf289dc64a3705c47fe2b903ee41012749ec38e8f77f6ad125a411180571b4f335245804672f34a1747e8441598767e51548020754b4b1c0c657932855ba42cb9f936c69a520f91346dd9badf0e8e3e9588e8cc72798bfa2f47d335cba9c3c1d34802a6f96272c3d05ca9a8dd96a0ba94a5bef5bb68a9af6d5717b28ee8f989a97ce0704f709fde4b33ac343879a1f41249fed5b89cc91d09c3e67750e3f31037c72b13e67b224843532fe01b288da001120a11d0b2df59adddef41872581aca3f9e1c16b3e7e11cf607704855f01700f65e8ab8ea1a9ce15108fb213e6c5f4b61c7817c960580cd9957edf43346e8edebfda47bb13b751df2354ed026250d75221bbcd9e3e6b764784a1c29970464d6ee56d5aa4b783b0644f86edc830f4fa5e54cbfd7dd146f6e6808aa747c56f9b060509cecf26e140049"}) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x40002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000040)={[{@data_ordered}]}) 05:33:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x0, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) [ 2138.448850] EXT4-fs (sda): re-mounted. Opts: data=ordered,,errors=continue 05:33:34 executing program 5: mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000040)={[{@data_ordered}]}) 05:33:34 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x33e868de84785cfb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x4, &(0x7f0000000000)=[{0x7f, 0x6, 0x21, 0x6}, {0x400, 0x5, 0x9, 0x8000}, {0x7, 0x0, 0x0, 0x7}, {0xc764, 0x7f, 0x3, 0x4}]}) chdir(&(0x7f00000002c0)='./file1\x00') syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/55, 0x37, 0x0) [ 2138.539526] FAULT_INJECTION: forcing a failure. [ 2138.539526] name failslab, interval 1, probability 0, space 0, times 0 [ 2138.542113] CPU: 1 PID: 30904 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2138.543590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2138.545368] Call Trace: [ 2138.545936] dump_stack+0x107/0x167 [ 2138.546729] should_fail.cold+0x5/0xa [ 2138.547534] ? create_object.isra.0+0x3a/0xa20 [ 2138.548505] should_failslab+0x5/0x20 [ 2138.549314] kmem_cache_alloc+0x5b/0x310 [ 2138.550183] create_object.isra.0+0x3a/0xa20 [ 2138.551120] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2138.552204] kmem_cache_alloc+0x159/0x310 [ 2138.553094] __delayacct_tsk_init+0x1b/0x80 [ 2138.554008] copy_process+0x3395/0x78b0 [ 2138.554869] ? stack_trace_save+0x8c/0xc0 [ 2138.555753] ? stack_trace_consume_entry+0x160/0x160 [ 2138.556843] ? __cleanup_sighand+0xb0/0xb0 [ 2138.557738] ? do_syscall_64+0x33/0x40 [ 2138.558571] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2138.559741] ? lock_acquire+0x197/0x470 [ 2138.560583] ? create_object.isra.0+0x3ad/0xa20 [ 2138.561579] ? lock_release+0x680/0x680 [ 2138.562416] ? find_held_lock+0x2c/0x110 [ 2138.563299] ? io_wqe_dec_running+0x220/0x220 [ 2138.564253] create_io_thread+0xb6/0xf0 [ 2138.565099] ? pidfd_prepare+0x80/0x80 [ 2138.565919] ? mark_held_locks+0x9e/0xe0 [ 2138.566789] ? io_wqe_dec_running+0x220/0x220 [ 2138.567762] ? __init_swait_queue_head+0xc6/0x150 [ 2138.568790] create_io_worker+0x23a/0x690 [ 2138.569674] io_wqe_enqueue+0x69e/0xbe0 [ 2138.570532] ? create_worker_cb+0x260/0x260 [ 2138.571477] ? io_prep_async_work+0x340/0x550 [ 2138.572428] io_queue_async_work+0x26b/0x4f0 [ 2138.573369] __io_queue_sqe+0x5cc/0x9d0 [ 2138.574215] ? io_issue_sqe+0x77b0/0x77b0 [ 2138.575100] ? __fget_files+0x2f8/0x520 [ 2138.575956] io_submit_sqes+0x44aa/0x8610 [ 2138.576872] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2138.577935] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2138.578981] ? find_held_lock+0x2c/0x110 [ 2138.579846] ? io_submit_sqes+0x8610/0x8610 [ 2138.580772] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2138.581793] ? wait_for_completion_io+0x270/0x270 [ 2138.582823] ? rcu_read_lock_any_held+0x75/0xa0 [ 2138.583805] ? vfs_write+0x354/0xb10 [ 2138.584592] ? fput_many+0x2f/0x1a0 [ 2138.585364] ? ksys_write+0x1a9/0x260 [ 2138.586171] ? __ia32_sys_read+0xb0/0xb0 [ 2138.587042] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2138.588158] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2138.589254] do_syscall_64+0x33/0x40 [ 2138.590050] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2138.591145] RIP: 0033:0x7f0bbbb8ab19 [ 2138.591942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2138.595844] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2138.597459] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2138.598985] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2138.600501] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2138.602010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2138.603530] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:33:52 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x0, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:33:52 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000010001000000000000000000008fc1a0e034bf94775ac815db0895a7b3a29bc5b6d9b1512854781a56d470290a6f69cf7d9a16f5e3b1b7401e21e5f9fbc6ec32782d5be943931f17ed217b88bd0400000000000000d724079420873cc6a874f123a3e25c9accaac29cbcbe86cbbc8c9798c91c3064b18039b7a092f9fe851b2128859add1ee22ee93ba086c411961389e14e814787b75fa8bd6576d36347393d0478985f66f068d15c60ea19b18a5ff6497ae37e1856ccb613e6dca9d43f4a329230aa24d549e818ad05d9917d2796d65c0ce06a2511daea0851681da5e59ef60e4e3ef69048eea8c9c35d1ea0ee7b6494a55a0ad4e5b3e573f6906bd133816af722b042ce55c58429eb1879aa3450e6f4824ce0b58b18e6facc4c8cce2c699acbe73e61b6c1607e0000000000000000c6ce2b6168e69ea693ef51f2a3a7b34af3b574f74db2f4456bf12e19ab37904894e1de954442fbec837f4236b179bcc62d1a7de0f5754f977dd368d2453e3837af3af1d7d21b151724de75eeacc5841a3af6b09ada192410f586f4db270784e9e7730ac4f488b75dacf708b257ded5b76199732e0d0cba4dafff08ba0a33355f4bc392e4d8da173afcef3505ab7d992b86b8ecbd3a9399cb7c8734c7358cf0baf629f80a088e00455023fc21583cf45711ae2b0a3193462739a7746c16a66dc00c7af66c2d8ef7a8c651e1344afdeba663fc7a3aa902", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x4000007}) 05:33:52 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:33:52 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4fed, 0x0, 0x0) 05:33:52 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x33e868de84785cfb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x4, &(0x7f0000000000)=[{0x7f, 0x6, 0x21, 0x6}, {0x400, 0x5, 0x9, 0x8000}, {0x7, 0x0, 0x0, 0x7}, {0xc764, 0x7f, 0x3, 0x4}]}) chdir(&(0x7f00000002c0)='./file1\x00') syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/55, 0x37, 0x0) 05:33:52 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/55, 0x37, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x1, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0]) syz_io_uring_setup(0x1b0e, &(0x7f0000000340)={0x0, 0x4fcc, 0x1, 0x1, 0xbf, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r5) syz_io_uring_submit(0x0, r4, &(0x7f0000000300)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x0, @fd=r1, 0x8, 0x9, 0x954, 0x0, 0x1, {0x1, r5}}, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000fcf000/0x2000)=nil, 0x2000, 0x2, 0x100010, r3, 0x10000000) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r8) syz_io_uring_submit(0x0, r7, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x7) 05:33:52 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x609, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b6, 0x0, 0x8000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=ft,r\x00dno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=none,\x00']) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$FITHAW(r3, 0xc0045878) r4 = fork() ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:33:52 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) [ 2156.486739] 9pnet: Could not find request transport: ft [ 2156.507596] EXT4-fs (sda): Unrecognized mount option "01777777777777777777777" or missing value [ 2156.526845] FAULT_INJECTION: forcing a failure. [ 2156.526845] name failslab, interval 1, probability 0, space 0, times 0 [ 2156.529531] CPU: 0 PID: 31143 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2156.531013] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2156.532715] Call Trace: [ 2156.533258] dump_stack+0x107/0x167 [ 2156.534034] should_fail.cold+0x5/0xa [ 2156.534837] should_failslab+0x5/0x20 [ 2156.535667] kmem_cache_alloc_bulk+0x4b/0x320 [ 2156.536647] io_submit_sqes+0x6fe6/0x8610 [ 2156.537571] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2156.538638] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2156.539680] ? find_held_lock+0x2c/0x110 [ 2156.540533] ? io_submit_sqes+0x8610/0x8610 [ 2156.541468] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2156.542458] ? wait_for_completion_io+0x270/0x270 [ 2156.543477] ? rcu_read_lock_any_held+0x75/0xa0 [ 2156.544435] ? vfs_write+0x354/0xb10 [ 2156.545200] ? fput_many+0x2f/0x1a0 [ 2156.545967] ? ksys_write+0x1a9/0x260 [ 2156.546751] ? __ia32_sys_read+0xb0/0xb0 [ 2156.547622] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2156.548758] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2156.549873] do_syscall_64+0x33/0x40 [ 2156.550672] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2156.551790] RIP: 0033:0x7f0bbbb8ab19 [ 2156.552589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2156.556547] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2156.558178] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2156.559725] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2156.561247] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2156.562783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2156.564292] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 [ 2156.583591] EXT4-fs (sda): Unrecognized mount option "01777777777777777777777" or missing value 05:33:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) 05:33:52 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x33e868de84785cfb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x4, &(0x7f0000000000)=[{0x7f, 0x6, 0x21, 0x6}, {0x400, 0x5, 0x9, 0x8000}, {0x7, 0x0, 0x0, 0x7}, {0xc764, 0x7f, 0x3, 0x4}]}) chdir(&(0x7f00000002c0)='./file1\x00') syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/55, 0x37, 0x0) 05:33:52 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffb}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000040)='mnt/encrypted_dir/file0\x00', &(0x7f0000000180)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r4}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r4}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r4}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r5]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r4, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:33:52 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4fee, 0x0, 0x0) 05:33:52 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x33e868de84785cfb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x4, &(0x7f0000000000)=[{0x7f, 0x6, 0x21, 0x6}, {0x400, 0x5, 0x9, 0x8000}, {0x7, 0x0, 0x0, 0x7}, {0xc764, 0x7f, 0x3, 0x4}]}) chdir(&(0x7f00000002c0)='./file1\x00') syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) 05:33:52 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x8c) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r3 = fork() ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:33:52 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1120000, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000a40)={r0, 0x5, 0x7, 0x81}) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000a80)={0x3, 0x40, 0xfffffffffffffff9}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000980)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000900)="668ee9b17ee56fd69126180973d7ce09b3f62b99d8cb315e67e01b4dde8caeba8178c75c86df75b180402d16c7d1b36d2eadbcd1baddd426248fff7f0def941408d967bf4ab4209856fdebe816659e12da05334f0fe388344cb751f844f42301bcf1f11c17", 0x65, r0}, 0x68) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000cc0)) r2 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r0, {0xee00, r2}}, './file0\x00'}) r3 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000a00)='./file0/../file0\x00', 0x22) fcntl$dupfd(r0, 0x406, r1) sendmmsg(r3, &(0x7f0000000180)=[{{&(0x7f0000000480)=@phonet={0x23, 0x40, 0xfc, 0x1c}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000500)="1f28392da44369fed8134b28960ce0d0df4f73ce579c1f01edd84fd6c246f58f89f86d99c675d780f3ee45aa9d2c9d39e156f7734f6624ba95dd002bac9fe79af777a10117dacecdbea9dd30740f9202c8cef8c680ed9d628e097be259bbdd4b481f30aa", 0x64}, {&(0x7f0000000d80)="90846af1bb1ae7c2b3aad66dcf249063d3d34087e1936ecdbde8e4972ca59e2afc", 0x14}, {&(0x7f0000000b00)="ac2f9ee8bf29dc692db701aa2471b1905fa8c91fbaaccae9ab89b3c7ed0bcc5d0c78b2da87ab71bbd510627cf27c462aef88f738120221b9f62822f8606a8480fa6c1049ed0263873bbed11fe5b2d8e67156b723b5d8012836a7bf2336654d8541", 0x61}, {&(0x7f0000000b80)="e4afbc02bf265deafeb82c3682a3d268fa90800ff7814c6f8db3d6b1d70724d92d144468b5f770b140056f97e4aafd63f945f334b723060b86b82c9f59943f721d005b7ec5840602db86fa50c8f84cb96d6381dd846455bc654fc957314d2a673ddcd41ddd1cc6a4487b37e07cccdd1bccf2fd7cb788cd4a2b9f7e03e21581028edc3d9fe366cf371a96d78be4d347edae7ead5371f55f46e0681978864f685fed74fa7e3e0f621b1d0565b2ba33a08c19e993a7a8f34ae62941d5ab32d0042492e7102985c67569454e60", 0xcb}], 0x4, &(0x7f0000000580)=[{0xb0, 0x119, 0x400, "6e459fc08c3b23d4a886a5a8068079c0489a542f4e5a8d7a07f0b927713007bd24e89df193c40fa3ea83859e7d438a5abf8552034235d64bedd40ec2cdcc8e86ada3b1bcd688a31cfa82dbd57d9ffb505f4b8ab9f545f0b266f11fbd9ac55da63a7921b5b07dddd0bbe545c780d24916edfad264b3227f119b66819d39673a4d324d90c8b183751dd4ce217570ec96f5ce6b8eb907a2ecb9b2ba0beb9cea9d"}, {0x48, 0x86, 0x8, "f6a8e09375425d6194ccb0465529e74a7c81deb4927541ca20753a3bea414de64ec99e84173a92a9b901e7b8076587ea91cb5b"}, {0xf0, 0x110, 0x1, "f33814d5510201ed8e595442e7625f0d2e2ce1fc63c03bda1532ecdd2f86b9743dd19c6b88761da67a65177f8a3f4efc558d07c35b48f9333b41134db09badf3cf07ff21dbdb9cc3e4069fda9c6fb3d50f1b9a58d1009a396fd8422238264a87aab8e636383c19eeb5d49276cc8b66d44e27393551b2f83d787801be20b6c0f007b5b891b5ebc34112568365e3c40604d00b2299597d22f4abf93711fd866bf7aafba07f9f375d67d9dda8c671dad736e6277b38c558261c817038856435c81c8018b9f250af0067339edeb8cbb62f2c54c4a4f476e6fecad616a7"}, {0x80, 0x29, 0x1, "bc6d8a4e6175207b6ee2ed1512a6f5e298f398d745d65d6022f87743a2ab62e2242db705fa77d57f2464855be7265980ee2f9e2670af4bb537c884c8c409e1280f6023750ca98edf47608742fb7b799cfd85b0a843330f460a2deb5fe49782a6b404d67f836043f86ec2cb8e492d2f"}, {0xff, 0x3a, 0x3, "0e74614b3f6f0058a64340ef52026ad27a7ad60446613e29f54160e6db4f9ab42857671336dd1fd53896bbbc025b7da609c3323d8b047f89fa850edfe509138776c3da58ae3f93dc58f8714bf58771491024edefec53e590571b029e3b4e01eafb8de763054bf3ab9eed9c54b94e725e072dcfa397cb8eb6319da09bd82cea1847f7ded739c1c94407733bc2ac9d283d6c239252fc0fdf2ac8582639fea76066bdd5155a8959b43f758fe66bbda08d78310de0cfc27694455bf03138f11fb6129aa6e3bd7cf209c644598670ed312a6aca3ec693e47f1c64f9a2705b5b732c635f"}], 0x360}}], 0x1, 0x4000) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000080)={[{@data_ordered}]}) 05:33:52 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r4]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) [ 2156.878038] EXT4-fs (sda): re-mounted. Opts: data=ordered,,errors=continue 05:34:10 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:34:10 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xea4f, 0x0, 0x0) 05:34:10 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) 05:34:10 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x33e868de84785cfb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x4, &(0x7f0000000000)=[{0x7f, 0x6, 0x21, 0x6}, {0x400, 0x5, 0x9, 0x8000}, {0x7, 0x0, 0x0, 0x7}, {0xc764, 0x7f, 0x3, 0x4}]}) chdir(&(0x7f00000002c0)='./file1\x00') syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) 05:34:10 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000040)={[{@data_ordered}]}) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), 0x3a24401, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x88) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x800, 0x0) 05:34:10 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/493, @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x8}) 05:34:10 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d66642c7666646e6f3d9082b49d949aa54e2e250314b227071c7b7630d54da05f7e735aa00509006af7abbb4754f2550ac1fbd446c8510bed78e7fbff187454453f6ffc91ac110988b0eed7668e89ab1e55942433f73118212bec08300bb8d7de20e8c368b65e88efaccd6339050953b3d6241448c922ddf59432b600793de292c88f921e06a4d29e6ee256760569437ad3701f8487ccc494000000000000c4734cb90681e7962a192e181d7d90278c9016a2252a5ba391a821bc4639210b657a85ee4d326e766985082323b993caae6fe8", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=none,\x00']) r3 = fork() ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:34:10 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x0, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) [ 2174.228185] EXT4-fs (sda): re-mounted. Opts: data=ordered,,errors=continue [ 2174.247611] FAULT_INJECTION: forcing a failure. [ 2174.247611] name failslab, interval 1, probability 0, space 0, times 0 [ 2174.250542] CPU: 1 PID: 31593 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2174.252196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2174.254170] Call Trace: [ 2174.254792] dump_stack+0x107/0x167 [ 2174.255661] should_fail.cold+0x5/0xa [ 2174.256510] ? create_object.isra.0+0x3a/0xa20 [ 2174.257597] should_failslab+0x5/0x20 [ 2174.258498] kmem_cache_alloc+0x5b/0x310 [ 2174.259471] ? mark_held_locks+0x9e/0xe0 [ 2174.260231] 9pnet: Insufficient options for proto=fd [ 2174.260442] create_object.isra.0+0x3a/0xa20 [ 2174.262643] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2174.263858] kmem_cache_alloc_bulk+0x168/0x320 [ 2174.264932] io_submit_sqes+0x6fe6/0x8610 [ 2174.265932] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2174.267121] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2174.268281] ? find_held_lock+0x2c/0x110 [ 2174.269241] ? io_submit_sqes+0x8610/0x8610 [ 2174.270242] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2174.271401] ? wait_for_completion_io+0x270/0x270 [ 2174.272558] ? rcu_read_lock_any_held+0x75/0xa0 [ 2174.273653] ? vfs_write+0x354/0xb10 [ 2174.274516] ? fput_many+0x2f/0x1a0 [ 2174.275355] ? ksys_write+0x1a9/0x260 [ 2174.276230] ? __ia32_sys_read+0xb0/0xb0 [ 2174.277205] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2174.278433] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2174.279642] do_syscall_64+0x33/0x40 [ 2174.280518] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2174.281731] RIP: 0033:0x7f0bbbb8ab19 [ 2174.282619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2174.286905] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2174.288678] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2174.290345] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2174.292026] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2174.293669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2174.295352] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 [ 2174.323053] EXT4-fs (sda): re-mounted. Opts: data=ordered,,errors=continue 05:34:10 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x33e868de84785cfb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x4, &(0x7f0000000000)=[{0x7f, 0x6, 0x21, 0x6}, {0x400, 0x5, 0x9, 0x8000}, {0x7, 0x0, 0x0, 0x7}, {0xc764, 0x7f, 0x3, 0x4}]}) chdir(&(0x7f00000002c0)='./file1\x00') syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) 05:34:10 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@empty}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:34:10 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) r0 = syz_io_uring_complete(0x0) getdents64(r0, &(0x7f0000000240)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x9, 0x0, 0x0, 0x1a8024, &(0x7f0000000080)={[{@data_journal}]}) 05:34:10 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xec4f, 0x0, 0x0) [ 2174.492743] EXT4-fs (sda): Cannot change data mode on remount [ 2174.504876] EXT4-fs (sda): Cannot change data mode on remount 05:34:10 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x33e868de84785cfb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x4, &(0x7f0000000000)=[{0x7f, 0x6, 0x21, 0x6}, {0x400, 0x5, 0x9, 0x8000}, {0x7, 0x0, 0x0, 0x7}, {0xc764, 0x7f, 0x3, 0x4}]}) chdir(&(0x7f00000002c0)='./file1\x00') syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/55, 0x37, 0x0) 05:34:10 executing program 5: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) chroot(&(0x7f00000000c0)='./file0\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)="2188b1c34fc0bda09384de3daab24209ba14155aedca91a1ada3e0bf2d175fc0b452d30b67a4dc17d9134392cf386cafb92e927d9af98ca0140d0436fa28402664a357850ff4873a9791ef13818d5139d6793de0ce78c9c0ff9f40689683e8a4925d3da81e4d1a904c38f7b8253d569ae14158111136a5e48b0182cd8fd95e49e3d2e8821c3a2ccf9c5f9b90605aa55a53f570235e2e14327b9c36f0e13755344ee09046d68ac4ab452e5d48a53511f0403baab968add97539445c3814d9c86e6ba1ecd8e68821f466ff7a694fc853ad68dfbe400a7852096e00a1445b1ae5722942cd", 0xe3, r0}, 0x68) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000040)={[{@data_ordered}]}) 05:34:10 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:34:10 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 39) [ 2174.692802] EXT4-fs (sda): re-mounted. Opts: data=ordered,,errors=continue [ 2174.820688] FAULT_INJECTION: forcing a failure. [ 2174.820688] name failslab, interval 1, probability 0, space 0, times 0 [ 2174.823548] CPU: 1 PID: 31934 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2174.825100] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2174.826939] Call Trace: [ 2174.827545] dump_stack+0x107/0x167 [ 2174.828354] should_fail.cold+0x5/0xa [ 2174.829200] ? create_object.isra.0+0x3a/0xa20 [ 2174.830232] should_failslab+0x5/0x20 [ 2174.831073] kmem_cache_alloc+0x5b/0x310 [ 2174.831994] create_object.isra.0+0x3a/0xa20 [ 2174.832983] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2174.834115] kmem_cache_alloc+0x159/0x310 [ 2174.835043] alloc_pid+0xd7/0xd30 [ 2174.835841] ? copy_namespaces+0x1ca/0x4f0 [ 2174.836781] copy_process+0x3b87/0x78b0 [ 2174.837697] ? stack_trace_save+0x8c/0xc0 [ 2174.838642] ? stack_trace_consume_entry+0x160/0x160 [ 2174.839796] ? __cleanup_sighand+0xb0/0xb0 [ 2174.840752] ? do_syscall_64+0x33/0x40 [ 2174.841623] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2174.842810] ? lock_acquire+0x197/0x470 [ 2174.843708] ? create_object.isra.0+0x3ad/0xa20 [ 2174.844757] ? lock_release+0x680/0x680 [ 2174.845642] ? find_held_lock+0x2c/0x110 [ 2174.846576] ? io_wqe_dec_running+0x220/0x220 [ 2174.847610] create_io_thread+0xb6/0xf0 [ 2174.848499] ? pidfd_prepare+0x80/0x80 [ 2174.849358] ? mark_held_locks+0x9e/0xe0 [ 2174.850275] ? io_wqe_dec_running+0x220/0x220 [ 2174.851307] ? __init_swait_queue_head+0xc6/0x150 [ 2174.852402] create_io_worker+0x23a/0x690 [ 2174.853338] io_wqe_enqueue+0x69e/0xbe0 [ 2174.854244] ? create_worker_cb+0x260/0x260 [ 2174.855238] ? io_prep_async_work+0x340/0x550 [ 2174.856252] io_queue_async_work+0x26b/0x4f0 [ 2174.857238] __io_queue_sqe+0x5cc/0x9d0 [ 2174.858132] ? io_issue_sqe+0x77b0/0x77b0 [ 2174.859046] ? __fget_files+0x2f8/0x520 [ 2174.859954] io_submit_sqes+0x44aa/0x8610 [ 2174.860909] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2174.862018] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2174.863102] ? find_held_lock+0x2c/0x110 [ 2174.864058] ? io_submit_sqes+0x8610/0x8610 [ 2174.865038] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2174.866114] ? wait_for_completion_io+0x270/0x270 [ 2174.867205] ? rcu_read_lock_any_held+0x75/0xa0 [ 2174.868256] ? vfs_write+0x354/0xb10 [ 2174.869096] ? fput_many+0x2f/0x1a0 [ 2174.869911] ? ksys_write+0x1a9/0x260 [ 2174.870768] ? __ia32_sys_read+0xb0/0xb0 [ 2174.871703] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2174.872876] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2174.874037] do_syscall_64+0x33/0x40 [ 2174.874879] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2174.876055] RIP: 0033:0x7f0bbbb8ab19 [ 2174.876939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2174.881151] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2174.882853] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2174.884443] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2174.886031] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2174.887638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2174.889264] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:34:26 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:34:26 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xed4f, 0x0, 0x0) 05:34:26 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x0, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:34:26 executing program 4: ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000340)={0x1, 0x2, 0x1000, 0x97, &(0x7f0000000280)="7d53c81a83f843875d7b8888481890780fa2a0d9c86f722660ed3ddfc18f723d7e60cec2dede33d4443ee6a2390b470911c3724fc09ac2af04a4709e012fdcabba224fe6bd0e9a730f8e6573baea8dbd765773df0e1e408a1e616604c4c45a383e5114c533e99310fd81ec49679e0e91212d12eb5547b12572430dc69bd1888259dc58b2f36395e7b1185d2e4bbac779e07b7ec1ff966a", 0x14, 0x0, &(0x7f0000000000)="233bc30c78cc14a11b0ceecdb6c533084124827c"}) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xb44, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r4 = fork() ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:34:26 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x33e868de84785cfb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x4, &(0x7f0000000000)=[{0x7f, 0x6, 0x21, 0x6}, {0x400, 0x5, 0x9, 0x8000}, {0x7, 0x0, 0x0, 0x7}, {0xc764, 0x7f, 0x3, 0x4}]}) chdir(&(0x7f00000002c0)='./file1\x00') r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/55, 0x37, 0x0) 05:34:26 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000080)={@local, 0x78, r4}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r4}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r4}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1, @ANYRES64=r5]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000400)={'syztnl0\x00', r4, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) open(&(0x7f0000000180)='./file1\x00', 0x200000, 0x44) 05:34:26 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000040)={[{@data_ordered}]}) open_tree(r0, &(0x7f0000000080)='./file0\x00', 0x800) 05:34:26 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 40) [ 2190.158310] EXT4-fs (sda): re-mounted. Opts: data=ordered,,errors=continue [ 2190.182468] EXT4-fs (sda): re-mounted. Opts: data=ordered,,errors=continue [ 2190.190739] FAULT_INJECTION: forcing a failure. [ 2190.190739] name failslab, interval 1, probability 0, space 0, times 0 [ 2190.193538] CPU: 1 PID: 31953 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2190.195095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2190.196975] Call Trace: [ 2190.197576] dump_stack+0x107/0x167 05:34:26 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x33e868de84785cfb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x4, &(0x7f0000000000)=[{0x7f, 0x6, 0x21, 0x6}, {0x400, 0x5, 0x9, 0x8000}, {0x7, 0x0, 0x0, 0x7}, {0xc764, 0x7f, 0x3, 0x4}]}) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/55, 0x37, 0x0) [ 2190.198414] should_fail.cold+0x5/0xa [ 2190.199433] ? alloc_pid+0xd7/0xd30 [ 2190.200293] should_failslab+0x5/0x20 [ 2190.201159] kmem_cache_alloc+0x5b/0x310 [ 2190.202080] alloc_pid+0xd7/0xd30 [ 2190.202867] ? copy_namespaces+0x1ca/0x4f0 [ 2190.203844] copy_process+0x3b87/0x78b0 [ 2190.204749] ? stack_trace_save+0x8c/0xc0 [ 2190.205691] ? stack_trace_consume_entry+0x160/0x160 [ 2190.206863] ? __cleanup_sighand+0xb0/0xb0 [ 2190.207833] ? do_syscall_64+0x33/0x40 [ 2190.208732] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2190.209957] ? lock_acquire+0x197/0x470 [ 2190.210863] ? create_object.isra.0+0x3ad/0xa20 [ 2190.211939] ? lock_release+0x680/0x680 [ 2190.212851] ? find_held_lock+0x2c/0x110 05:34:26 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) [ 2190.213784] ? io_wqe_dec_running+0x220/0x220 [ 2190.214949] create_io_thread+0xb6/0xf0 [ 2190.215864] ? pidfd_prepare+0x80/0x80 [ 2190.216740] ? mark_held_locks+0x9e/0xe0 [ 2190.217667] ? io_wqe_dec_running+0x220/0x220 [ 2190.218700] ? __init_swait_queue_head+0xc6/0x150 [ 2190.219814] create_io_worker+0x23a/0x690 [ 2190.220766] io_wqe_enqueue+0x69e/0xbe0 [ 2190.221676] ? create_worker_cb+0x260/0x260 [ 2190.222669] ? io_prep_async_work+0x340/0x550 [ 2190.223705] io_queue_async_work+0x26b/0x4f0 [ 2190.224716] __io_queue_sqe+0x5cc/0x9d0 [ 2190.225620] ? io_issue_sqe+0x77b0/0x77b0 [ 2190.226566] ? __fget_files+0x2f8/0x520 [ 2190.227496] io_submit_sqes+0x44aa/0x8610 [ 2190.228471] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2190.229599] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2190.230697] ? find_held_lock+0x2c/0x110 [ 2190.231635] ? io_submit_sqes+0x8610/0x8610 [ 2190.232633] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2190.233727] ? wait_for_completion_io+0x270/0x270 [ 2190.234817] ? rcu_read_lock_any_held+0x75/0xa0 [ 2190.235882] ? vfs_write+0x354/0xb10 [ 2190.236732] ? fput_many+0x2f/0x1a0 [ 2190.237563] ? ksys_write+0x1a9/0x260 [ 2190.238429] ? __ia32_sys_read+0xb0/0xb0 [ 2190.239372] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.240556] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2190.241735] do_syscall_64+0x33/0x40 [ 2190.242577] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2190.243759] RIP: 0033:0x7f0bbbb8ab19 [ 2190.244597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2190.248788] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2190.250522] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2190.252148] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2190.253758] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2190.255373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2190.256988] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:34:26 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173080, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000040)=ANY=[@ANYBLOB="1f73c12fe18d6442657265642c00"]) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x84, 0x0, 0x33, 0x5, 0x0, 0xe3b, 0x80140, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x5, 0x3ff}, 0x10, 0x2, 0x7073cbfb, 0x6, 0x3ff, 0x6, 0x2, 0x0, 0x0, 0x0, 0x100000001}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 05:34:26 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x33e868de84785cfb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/55, 0x37, 0x0) [ 2190.440861] EXT4-fs (sda): Unrecognized mount option "sÁ/ádBered" or missing value 05:34:26 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xee4f, 0x0, 0x0) [ 2190.457194] EXT4-fs (sda): Unrecognized mount option "sÁ/ádBered" or missing value 05:34:26 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r0 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000080)={@local, 0x78, r4}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r4}) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r4}, 0x14) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000280)) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r4, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x1c}) 05:34:26 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x5, 0x39, 0x0, 0x130cc24, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x39280b6, &(0x7f0000000040)=ANY=[]) openat(r0, &(0x7f00000000c0)='./file0/../file0\x00', 0x400000, 0x101) 05:34:26 executing program 4: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000100)=0x2, 0x7f) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x5, 0x9, 0x9, 0x4, 0x2, 0x9b04f196bef17dd6, 0xffffffe0, 0x31a, 0x40, 0x31f, 0x8, 0x552d, 0x38, 0x2, 0x1f, 0x8ab0}, [{0x5, 0x5, 0x1000000, 0xfffffffffffffffd, 0xfff, 0x5, 0x1bb, 0x3}, {0x5, 0x8, 0x6, 0x1, 0x3, 0x3, 0x1, 0x3}], "01c701021948cb8287ea839e89dae42e3f99f58b8db465aae2265b7bbbf6fa00cb5848e182d67c15c5eb21fab061f1fd0a845c36c9a11707ddce86d7865ede9a443e50f828b5b35fc2a04856299e13a13ab1007bc50478a9c658e913da0da0e01e450f58fc87", ['\x00', '\x00', '\x00', '\x00']}, 0x516) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x9084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pread64(r2, &(0x7f00000001c0)=""/94, 0x5e, 0x3f) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000280)='./file1\x00', 0x94000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB, @ANYRESHEX=r4, @ANYBLOB=',cache=mmap,cache=none,\x00']) fork() [ 2190.576408] EXT4-fs (sda): Unrecognized mount option "./file0" or missing value [ 2190.678654] 9pnet: Insufficient options for proto=fd 05:34:40 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x2, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:34:40 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x33e868de84785cfb) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) 05:34:40 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x0, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:34:40 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:34:40 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x200000, 0x0, 0x0) 05:34:40 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 41) 05:34:40 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap}, {@access_user}], [{@fowner_lt={'fowner<', r3}}, {@dont_measure}]}}) r4 = fork() ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:34:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7f, 0x5, &(0x7f00000015c0)=[{&(0x7f0000000240)="a81a9f5cbb4a456a97c40f347ada056e290909ea3c49aa17fcc4906b8aa6bb7ff36d06d778ae2b784003e9e23cf11f5b0ae369013b53e22b19c6cfa446da9b42f5def60c8d82beb1894e7faf1624c8ceeaa9a5e2705f0acd4b3d1de91df304bc9436deb4c50a4a924081e39e3489917353d6c2f9f86a0e78f3af183aac0408ffa5d6ecd95170de54ea545c3c985bed19fa8c7d6e471fa250842e1b6db2c72f09ff4e59", 0xa3, 0x101}, {&(0x7f0000000300)="5dba8ef257c20de604ccce5fe73c8952f3cc8264caa40629e3301ad2644fc707d63eed51d9cbdeef7c2c6ec71b3ef32f679927d63610cb81291d7f9ef58d58033ddcd21c6996ac758bbb541dc89af664c8cd0253887d99b91bb605efb44dcad97bfa93c642b17c282676f41415c64a5606749b41c3ec4d2abd1035b80033834edb7cf87bf76d515149184bbc31b58d821c76fa922311c61453ea07ba6aff0bb8bf8be3eadd708429df8b941bc8075fe5b12743b3f558ace3c0f63621d5ecbafce7a63b1d515958d2216d57e01d", 0xcd, 0xfff}, {&(0x7f0000000400)="bdb6f955c1ef8c91e366248b7022fb359aab1a7bc2f3f85c05a7499d1f3ab61167469eb584cb3c4938009c35cf58cc10da82bcede68ae8709abdfd3221cd89a40c8af4276255a38a1490419827f0ab473c4e3562ef5793ed4038dcdd6412a5e4f74418474cb2d6772543ced2cb85b5b55c2b6f99bfb757a2b8daee6a34ac7a45771b558b96ec8e31166904afa2b62b53f056c9d4214ce2e48f093eaa544331fdc364c946f763c22f234f", 0xaa, 0x7}, {&(0x7f00000004c0)="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", 0x1000, 0x9}, {&(0x7f00000014c0)="d1a012a7030c4df28bb30307fe908de271e64fd603fc3c78221a415567356887d260a65f792d34f8138d4826c22a59cb1e466b94363828c7db0df70d8200352a5745df0f1e0f20ad5254e52981e2d587aa2f42d5db675855c54decdf64b434828bf24a1d94cb53f9a5dd0775620290571f7ae54d4a35a64d12dd812b95bf60f9fca3a5c9080675ea7a7e70139f9b414f90409f66d6b4150be0af6c3e694670f1f6b7c4d197f73cb2ab939421d2409eadde92fd7041333361e71c4bcb9b8a778dca560a7bfe3cc88f102f4db3c6c76f6a34fb9ad1b82fa74de193f8a0", 0xdc, 0x2}], 0x4, &(0x7f0000001640)={[{@huge_advise}, {@mpol={'mpol', 0x3d, {'local', '=static', @void}}}], [{@context={'context', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'data=ordered'}}, {@obj_role={'obj_role', 0x3d, '@'}}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}) getdents(0xffffffffffffff9c, &(0x7f00000016c0)=""/120, 0x78) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000180)={[{@data_ordered}]}) open$dir(&(0x7f0000000040)='./file0/../file0\x00', 0x50001, 0x100) lsetxattr(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)=@known='trusted.overlay.metacopy\x00', &(0x7f00000017c0)='$\x00', 0x2, 0x3) mount$bind(&(0x7f0000001800)='./file0/../file0\x00', &(0x7f0000001840)='./file0/../file0\x00', &(0x7f0000001880), 0x4000, 0x0) [ 2204.445848] FAULT_INJECTION: forcing a failure. 05:34:40 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r4}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r4}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r4}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r5]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r4, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) [ 2204.445848] name failslab, interval 1, probability 0, space 0, times 0 [ 2204.449033] CPU: 1 PID: 32411 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2204.450589] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2204.452499] Call Trace: [ 2204.453106] dump_stack+0x107/0x167 [ 2204.453948] should_fail.cold+0x5/0xa [ 2204.454622] loop5: detected capacity change from 0 to 7680 [ 2204.454810] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2204.455843] tmpfs: Unsupported parameter 'huge' [ 2204.456630] should_failslab+0x5/0x20 [ 2204.456651] __kmalloc_node+0x76/0x420 [ 2204.456679] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2204.459982] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 2204.461101] ? trace_hardirqs_on+0x5b/0x180 [ 2204.462078] kmem_cache_alloc_bulk+0x182/0x320 [ 2204.463102] io_submit_sqes+0x6fe6/0x8610 [ 2204.464071] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2204.465189] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2204.466271] ? find_held_lock+0x2c/0x110 [ 2204.467185] ? io_submit_sqes+0x8610/0x8610 [ 2204.468179] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2204.469258] ? wait_for_completion_io+0x270/0x270 [ 2204.470349] ? rcu_read_lock_any_held+0x75/0xa0 [ 2204.471428] ? vfs_write+0x354/0xb10 [ 2204.472284] ? fput_many+0x2f/0x1a0 [ 2204.473097] ? ksys_write+0x1a9/0x260 [ 2204.473971] ? __ia32_sys_read+0xb0/0xb0 [ 2204.474878] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2204.476058] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2204.477241] do_syscall_64+0x33/0x40 [ 2204.478072] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2204.479237] RIP: 0033:0x7f0bbbb8ab19 [ 2204.480079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2204.484206] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2204.485942] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2204.487576] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2204.489203] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2204.490821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2204.492459] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 [ 2204.510261] EXT4-fs (sda): re-mounted. Opts: data=ordered,,errors=continue [ 2204.548612] loop5: detected capacity change from 0 to 7680 [ 2204.551140] tmpfs: Unsupported parameter 'huge' [ 2204.552849] EXT4-fs (sda): re-mounted. Opts: data=ordered,,errors=continue 05:34:40 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f0000000100)='./file1\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r3 = fork() ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:34:40 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:34:40 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x33e868de84785cfb) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) 05:34:40 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') unlinkat(r0, &(0x7f0000000080)='./file1\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x8f6c, 0x0, 0x0, 0x1a8024, &(0x7f0000000240)=ANY=[@ANYBLOB="61626f72742c0022dcd1256d6b52a5019d325059be692d3a20573934c7d970231bfef338283c6b3474408ba7307cad84c6e4c61f5b4bea81d32733ec90004357f4186f723bcce2aa6498bcf98bf700a0a08be544388931b9d092b7d21900c8549fef91d0fc776b848738bb944340874a4c4322e7fb8ed128e337297c9621dc7205257b4db561fa121d378d6ba40457637624bb06bf493fd45f880b2013890e8290cabd25153721a458a4d7b1aa4ee2270dc8a570a6fe949f617851fcb6540b0b51a84b61c5b8ea4e3e0ac2010bba3991b7cf50c36bb49b54774d5c38dc4aee9f688f9ffe8a0cacba0b45"]) 05:34:40 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42) 05:34:40 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x88000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x16}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000280)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:34:40 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) [ 2204.791728] FAULT_INJECTION: forcing a failure. [ 2204.791728] name failslab, interval 1, probability 0, space 0, times 0 [ 2204.793111] CPU: 0 PID: 32640 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2204.793861] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2204.794757] Call Trace: [ 2204.795057] dump_stack+0x107/0x167 [ 2204.795454] should_fail.cold+0x5/0xa [ 2204.795902] ? create_object.isra.0+0x3a/0xa20 [ 2204.796400] should_failslab+0x5/0x20 [ 2204.796827] kmem_cache_alloc+0x5b/0x310 [ 2204.797279] ? mark_held_locks+0x9e/0xe0 [ 2204.797718] create_object.isra.0+0x3a/0xa20 [ 2204.798227] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2204.798929] kmem_cache_alloc_bulk+0x168/0x320 [ 2204.799471] io_submit_sqes+0x6fe6/0x8610 [ 2204.800069] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2204.800748] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2204.801396] ? find_held_lock+0x2c/0x110 [ 2204.801881] ? io_submit_sqes+0x8610/0x8610 [ 2204.802359] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2204.802909] ? wait_for_completion_io+0x270/0x270 [ 2204.803457] ? rcu_read_lock_any_held+0x75/0xa0 [ 2204.804014] ? vfs_write+0x354/0xb10 [ 2204.804438] ? fput_many+0x2f/0x1a0 [ 2204.804856] ? ksys_write+0x1a9/0x260 [ 2204.805271] ? __ia32_sys_read+0xb0/0xb0 [ 2204.805710] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2204.806279] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2204.806835] do_syscall_64+0x33/0x40 [ 2204.807262] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2204.807852] RIP: 0033:0x7f0bbbb8ab19 [ 2204.808276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2204.810321] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2204.811154] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2204.811935] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2204.812753] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2204.813564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2204.814385] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 [ 2220.739944] EXT4-fs (sda): Unrecognized mount option "0xffffffffffffffff1844674407370955161500000000000000000004ÿÿÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value 05:34:56 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x33e868de84785cfb) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) 05:34:56 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:34:56 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43) 05:34:56 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x400000, 0x0, 0x0) 05:34:56 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8826, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRESDEC=r2, @ANYRES16=r0, @ANYRES64, @ANYRES32]) 05:34:56 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:34:56 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r4, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r5 = fork() r6 = fsmount(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x0, 0x1}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r7, {0x1}}, './file1\x00'}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r7, 0x8010671f, &(0x7f0000000200)={&(0x7f00000001c0)=""/59, 0x3b}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:34:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x0, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) [ 2220.787514] EXT4-fs (sda): Unrecognized mount option "0xffffffffffffffff1844674407370955161500000000000000000004ÿÿÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 2220.804241] FAULT_INJECTION: forcing a failure. [ 2220.804241] name failslab, interval 1, probability 0, space 0, times 0 [ 2220.806689] CPU: 1 PID: 32767 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2220.808131] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2220.809808] Call Trace: [ 2220.810345] dump_stack+0x107/0x167 [ 2220.811083] should_fail.cold+0x5/0xa [ 2220.811848] should_failslab+0x5/0x20 [ 2220.812596] kmem_cache_alloc_bulk+0x4b/0x320 [ 2220.813488] io_submit_sqes+0x6fe6/0x8610 [ 2220.814334] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2220.815325] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2220.816288] ? find_held_lock+0x2c/0x110 [ 2220.817098] ? io_submit_sqes+0x8610/0x8610 [ 2220.817949] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2220.818919] ? wait_for_completion_io+0x270/0x270 [ 2220.819879] ? rcu_read_lock_any_held+0x75/0xa0 [ 2220.820801] ? vfs_write+0x354/0xb10 [ 2220.821542] ? fput_many+0x2f/0x1a0 [ 2220.822278] ? ksys_write+0x1a9/0x260 [ 2220.823027] ? __ia32_sys_read+0xb0/0xb0 [ 2220.823853] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2220.824886] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2220.825909] do_syscall_64+0x33/0x40 [ 2220.826645] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2220.827652] RIP: 0033:0x7f0bbbb8ab19 [ 2220.828424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2220.832180] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2220.833730] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2220.835169] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2220.836648] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2220.838091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2220.839503] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:34:56 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x33e868de84785cfb) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) 05:34:56 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000280)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:34:56 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0/file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000040)={[{@data_ordered}]}) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0x80901) faccessat(r0, &(0x7f0000000200)='./file0\x00', 0x6) pread64(r1, &(0x7f0000000040)=""/55, 0x37, 0x0) 05:34:57 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000, 0x0, 0x0) 05:34:57 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x4000fa, 0x8, 0x6, 0x292a, 0x101}) pread64(r4, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="6c2d2211af8ad2", @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,cache=none,\x00']) r5 = fork() openat$cgroup_ro(r4, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file0\x00', 0x101100, 0x4) 05:34:57 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) 05:34:57 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000340)={[], [{@fowner_eq}, {@appraise}, {@euid_gt={'euid>', r1}}, {@smackfsfloor}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x34, 0x33, 0x31, 0x0, 0x34, 0x36, 0x32], 0x2d, [0x57, 0x63, 0x30, 0x9], 0x2d, [0x30, 0x31, 0x34, 0x62], 0x2d, [0x31, 0x30, 0x37, 0x31], 0x2d, [0x37, 0x33, 0x35, 0x63, 0x0, 0x63, 0x34, 0x31]}}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@pcr={'pcr', 0x3d, 0x20}}, {@euid_lt={'euid<', r0}}]}) [ 2221.089260] 9pnet: Insufficient options for proto=fd 05:34:57 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0xe4c3, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x13, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="050000010001000000000000000000008fc1a0e0346da2657ed2c03759bf94775ac815db0895a7b3a29bc5b6d9b1512854781a56d470290a6f69cf7d9a16f5e3b1b7401e21e5f9fbc6ec32782d5be943931f17ed217b88bd0400000000000000d724079420873cc6a874f123a3e25c9aceaac29cbcbe86cbbc8c9798c91c3064b18039b7a092f9fe851b2128859add1ee22ee93ba086c411961389e14e814787b75fa8bd6576d36347393d0478985f66f068d15c60ea19b18a5ff6497ae37e1856ccb613e6dca9d43f4a329230aa24d549e818ad05d9917d2796d65c0ce06a2511daea0851681da5e59ef60e4e3ef69048eea8c9c35d1ea0ee7b6494a55a0ad4e542ce55c58429eb1879aa3450e6f4824ce0b5406ce02f592d1daac53636bf59", @ANYRESDEC=r2, @ANYRES64=r6]) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x8000, 0x1f, 0x4}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000280)={{0xa, 0x4e21, 0x9, @empty, 0xfff}, {0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}, 0x400}, 0x395b, [0xfffffff9, 0x4, 0xfffffff8, 0x3, 0x7, 0xf8000000, 0x9]}, 0x5c) 05:34:57 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 44) [ 2221.215534] FAULT_INJECTION: forcing a failure. [ 2221.215534] name failslab, interval 1, probability 0, space 0, times 0 [ 2221.217682] CPU: 0 PID: 33146 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2221.218880] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2221.220275] Call Trace: [ 2221.220727] dump_stack+0x107/0x167 [ 2221.221352] should_fail.cold+0x5/0xa [ 2221.222005] ? create_object.isra.0+0x3a/0xa20 [ 2221.222784] should_failslab+0x5/0x20 [ 2221.223426] kmem_cache_alloc+0x5b/0x310 [ 2221.224121] ? mark_held_locks+0x9e/0xe0 [ 2221.224806] create_object.isra.0+0x3a/0xa20 [ 2221.225546] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2221.226404] kmem_cache_alloc_bulk+0x168/0x320 [ 2221.227183] io_submit_sqes+0x6fe6/0x8610 [ 2221.227903] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2221.228740] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2221.229554] ? find_held_lock+0x2c/0x110 [ 2221.230240] ? io_submit_sqes+0x8610/0x8610 [ 2221.230970] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2221.231776] ? wait_for_completion_io+0x270/0x270 [ 2221.232589] ? rcu_read_lock_any_held+0x75/0xa0 [ 2221.233374] ? vfs_write+0x354/0xb10 [ 2221.234002] ? fput_many+0x2f/0x1a0 [ 2221.234613] ? ksys_write+0x1a9/0x260 [ 2221.235258] ? __ia32_sys_read+0xb0/0xb0 [ 2221.235947] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2221.236821] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2221.237689] do_syscall_64+0x33/0x40 [ 2221.238316] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2221.239176] RIP: 0033:0x7f0bbbb8ab19 [ 2221.239804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2221.242808] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2221.244073] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2221.245256] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2221.246421] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2221.247601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2221.248780] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:35:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0x0, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:35:13 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x8000000, 0x0, 0x0) 05:35:13 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) 05:35:13 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x5, 0x5, &(0x7f0000000580)=[{&(0x7f0000000180)="4d6db6ec", 0x4, 0xfffefffffffffffe}, {&(0x7f0000000240)="5bca54de55c1511c099061fa6875f80be3969a08959b9b7aa1cb89b8c769838615e5e3440e8a67785d6bb16c1fd43e912e808caa68b0471bd7cfb96d5885d3193ba4c9310f6030e1828b9e3170915f10064e63", 0x53, 0x1}, {&(0x7f00000002c0)="b4134717e0fb64aeafc20b6266ec00d556fbdbfa6292a970bd24d56478480fa348d62bd6c95bf7e2da4d842d64d555b69ec6ef4e10e7116f1896502b71f867b97df90357750b5161467f0d9132eba90fb82f29501adbcfda3c5403c64846e8515dbeea4b0826c54388f32285696e2843641bb044b308491eb3cbf32cde6515f347f9ab1e640d53972e8314053c0cbe6f99285a49c69909e80c4c9e920b9131dd407dedf26271af587133d81fee94a518df073fe944ed7b9419d1b32954c4d437efeb81c8fc42a8f113b2573c4685e7fc3de1a79d8f14bd62edba927b06681a299072d680b2f7a0a257", 0xe9, 0x7}, {&(0x7f00000003c0)="c65024d12dd9e3bf5e52ae31a70257dfa3afc4d5796931dc6e4b525706cd8e0f56936f61f7eb11663d3558e5814c6bed13179d9ee952ff1192c3136abf61348f2b0467188e1e9eaba972596509c9870e7769a03b02a2ad7a8bf9629ed1a8cc4bf9e4e5b69edcead2b34fabe4f917b040b243efbe4ef68816f58387c850b11608ab023981cd17bb1222b94e8e0fae66f38781461155", 0x95, 0x7}, {&(0x7f0000000480)="ad0ed5e08cb36768f320cf293ed8551ec28fc5cb9fc3882c21344bd9b85850661815cdb1d6f20fae83778340eeb1ed504783f976a68d09133028c94b281dfded4fda2e8f4478a968fa715e131c77a49b43b1e20cbc3ed26273bfdd28a22bb0972cad0296060000007cd1d206a6a5349b787d9664cac99efe2588a3379eb313004eb092b8d90c25bde05cffcce504e6edd2a89918c81dfdf3e70dd1f5aa4cc0c05ddfb81d5a33ebdc2f18d28bbcfa735a859731eefd838a3a32c9c267dcb8d389478c54263fe7fa004c09f110a65a6ee1dba291815f40fbc5b1", 0xd9, 0x7}], 0x821040, &(0x7f00000006c0)={[{@dots}], [{@permit_directio}, {@smackfshat={'smackfshat', 0x3d, 'data=ordered'}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00\x00\x00\x00\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'ext2\x00'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@obj_role={'obj_role', 0x3d, '+$}}\x14'}}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000600)={@multicast2, @broadcast, @multicast1}, &(0x7f0000000640)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'veth0_to_team\x00'}) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000780)={[{@data_ordered}, {@grpjquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@norecovery}]}) 05:35:13 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="050000010001000000000000000000008fc1a0e0346da2657ed2c03759bf94775ac815db0895a7b3a29bc5b6d9b1512854781a56d470290a6f69cf7d9a16f5e3b1b7401e21e5f9fbc6ec32782d5be943931f17ed217b88bd0400000000000000d724070ccca1a6ece2a59420873cc6a874f123a3e25c9aceaac29cbcbe86cbbc8c9798c91c3064b18039b7a092f9fe851b2128859add1ee22ee93ba086c411961389e14e814787b75fa8bd6576d36347393d0478985f66f068d15c60ea19b18a5ff6497ae37e1856ccb613e6dca9d43f4a329230aa24d549e818ad05d9917d2796d65c0ce06a2511daea0851681da5e59ef60e4e3ef69048eea8c9c35d1ea0ee7b6494a55a0ad4e542ce55c58429eb1879aa3450e6f4824ce0b5406ce02f592d", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:35:13 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = fork() ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) clone3(&(0x7f0000000340)={0x10000, &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000001c0), {0x6}, &(0x7f0000000280)=""/98, 0x62, &(0x7f0000000200)=""/63, &(0x7f0000000300)=[r0, r1], 0x2, {r2}}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trany=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=mmap,cache=none,\x00']) r6 = fork() ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:35:13 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 45) 05:35:13 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) [ 2237.672962] loop5: detected capacity change from 0 to 6290944 [ 2237.714857] FAULT_INJECTION: forcing a failure. [ 2237.714857] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2237.716561] CPU: 1 PID: 33236 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2237.717414] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2237.718426] Call Trace: [ 2237.718762] dump_stack+0x107/0x167 [ 2237.719214] should_fail.cold+0x5/0xa [ 2237.719691] __alloc_pages_nodemask+0x182/0x600 [ 2237.720271] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2237.721022] alloc_pages_current+0x187/0x280 [ 2237.721571] allocate_slab+0x26f/0x380 [ 2237.722058] ___slab_alloc+0x470/0x700 [ 2237.722543] ? io_submit_sqes+0x6fe6/0x8610 [ 2237.723088] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 2237.723673] kmem_cache_alloc_bulk+0x1ec/0x320 [ 2237.724245] io_submit_sqes+0x6fe6/0x8610 [ 2237.724774] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2237.725398] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2237.726001] ? find_held_lock+0x2c/0x110 [ 2237.726511] ? io_submit_sqes+0x8610/0x8610 [ 2237.727049] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2237.727652] ? wait_for_completion_io+0x270/0x270 [ 2237.728266] ? rcu_read_lock_any_held+0x75/0xa0 [ 2237.728856] ? vfs_write+0x354/0xb10 [ 2237.729322] ? fput_many+0x2f/0x1a0 [ 2237.729786] ? ksys_write+0x1a9/0x260 [ 2237.730265] ? __ia32_sys_read+0xb0/0xb0 [ 2237.730776] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2237.731426] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2237.732063] do_syscall_64+0x33/0x40 [ 2237.732514] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2237.733138] RIP: 0033:0x7f0bbbb8ab19 [ 2237.733594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2237.735842] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2237.736796] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2237.737664] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2237.738559] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2237.739444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2237.740337] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:35:13 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) [ 2237.753196] EXT4-fs (sda): re-mounted. Opts: data=ordered,grpjquota=,max_batch_time=0x0000000000000003,norecovery,,errors=continue 05:35:13 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000680)=ANY=[@ANYBLOB="050000010001000000000000000000008fc1a0e0346da20100000000000000775ac815db0895a7b3a29bc5b6d9b1512854781a56d470290a6f69cf7d9a16f5e3b1b7401e21e5f9fbc6ec32782d5be943931f17ed217b9420873cc6a874f123a3e25c9aceaac29cbcbe86cbbc8c9798c91c3064b18039b7a092f9fe851b2128859add1ee22ee93ba086c411961389e14e814787b75fa8bd6576d36347393d0478985f66f068d15c60ea19b18a5ff6497ae37e1856ccb613e6dca9d43f4a329230aa24d549e818ad05d9917d2796d65c0ce06a2511daea085168f60e4e3ef69048eea8c9c35d1ea0ee7b6494a55a0ad4e542ce55c58429eb1879aa3450e6f4824ce0b5406ce02f592d1daac53636180b16cfebbc461048d74a2f4fc3586a0674a3166a6a32adb3815f8fb7c2099fcf6e16d91794ef61ad1b69d202c09549ef8b9961850012cb3800000000", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:35:13 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100)={0x40101, 0x1, 0x2}, 0x18) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r3 = fork() ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:35:13 executing program 1: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) [ 2237.909188] loop5: detected capacity change from 0 to 6290944 05:35:13 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) 05:35:13 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 46) [ 2237.950680] EXT4-fs (sda): re-mounted. Opts: data=ordered,grpjquota=,max_batch_time=0x0000000000000003,norecovery,,errors=continue 05:35:14 executing program 1: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) 05:35:14 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0]) [ 2238.037332] FAULT_INJECTION: forcing a failure. [ 2238.037332] name failslab, interval 1, probability 0, space 0, times 0 [ 2238.038740] CPU: 1 PID: 33470 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2238.039531] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2238.040482] Call Trace: [ 2238.040786] dump_stack+0x107/0x167 [ 2238.041197] should_fail.cold+0x5/0xa [ 2238.041634] ? create_object.isra.0+0x3a/0xa20 [ 2238.042150] should_failslab+0x5/0x20 [ 2238.042586] kmem_cache_alloc+0x5b/0x310 [ 2238.043043] ? mark_held_locks+0x9e/0xe0 [ 2238.043506] create_object.isra.0+0x3a/0xa20 [ 2238.044006] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2238.044583] kmem_cache_alloc_bulk+0x168/0x320 [ 2238.045112] io_submit_sqes+0x6fe6/0x8610 [ 2238.045597] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2238.046161] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2238.046715] ? find_held_lock+0x2c/0x110 [ 2238.047186] ? io_submit_sqes+0x8610/0x8610 [ 2238.047690] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2238.048255] ? wait_for_completion_io+0x270/0x270 [ 2238.048819] ? rcu_read_lock_any_held+0x75/0xa0 [ 2238.049353] ? vfs_write+0x354/0xb10 [ 2238.049778] ? fput_many+0x2f/0x1a0 [ 2238.050195] ? ksys_write+0x1a9/0x260 [ 2238.050629] ? __ia32_sys_read+0xb0/0xb0 [ 2238.051099] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2238.051698] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2238.052292] do_syscall_64+0x33/0x40 [ 2238.052715] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2238.053303] RIP: 0033:0x7f0bbbb8ab19 [ 2238.053731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2238.055846] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2238.056730] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2238.057548] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2238.058373] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2238.059186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2238.059997] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 [ 2238.062920] EXT4-fs (sda): Unrecognized mount option "00000000000000000000003" or missing value [ 2238.087548] EXT4-fs (sda): Unrecognized mount option "00000000000000000000003" or missing value 05:35:29 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000040)={[{@data_ordered}]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xc36b}}, './file0\x00'}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x7, &(0x7f0000001600)=[{&(0x7f0000000280)="8625af7369c68fa6db0e5671dc0eedc83a1c5d7e902494c03a5132f5da6573973b684b7a7a5bb6bcef20636805140598091b8ec27f3515ac0b5709024f17398cfda08788d39db6450a18d0caf4c8be1871640d7a33e80815fd58cebbf5779ddd13df81f4301c80bd6f543ccfc4959c9138838b0e16830fd4ce0ddc85bdc5d89e9febaaf7583d9885f21d2dc27781fab4a5dc922a751fd774d814128068e9", 0x9e, 0x5}, {&(0x7f0000000340)="892bbd3dcf252a4d07f0656aa07b643b2c80d41f4e02114e2950ddd9b6d077d612719ec499154da9779a65ffad21832e0e6b58ab97e4fbed0dd50a6579001f7b822620ce2ee7c896fca256a2eaf3bfcf7b429c24a6e4cbc265455be30a96d55298f80870095e3de3cc28d3c23ad725966e8522d332b7496c9a3abd739125c5b7e29b0b11b66069b69d0cd1decf47864ffd94b30dcf915dcf6e370f8bc0880d832ce1d4b4376b0f4ea95b7a0f0a3dcfec76c787513a3db8199e36", 0xba, 0x1ff}, {&(0x7f0000000400)="a5f58d71166077c101bb08bb7b202ba01668cb14e5dfc4d8785107c0f2970ff7b90a49dc6c4645d7273a2e055434308d95e704a75fbfcdaee3f0424945b8ab47a81cc30412493de3463750850225a98d5049939720271886b506a50531e778f8cf700645295668105ae4ff04c34defc7b79aba0509b63fe3327271f76c7250161f503811d93f68d99f97303971f05a08446f0369f09f6360f99044da32805593cb06790d2443ea7aaa945618abaa7e43aaa77baf2124be108e226a91ff9f5bea02f59b616cfd6fdcf0d038556cc2db6b36d4d2944905f6f51a0d9b6cd98470d8ce83bd3b14c836aede6c98486f0d58af6c753beee8de47e2a0bf7da6967b1ca396a8ab19c7066670e1cfe96472d699886ad7eb68d789f7b32a4d35831731dc1ac07ad0d129eb77cdf3061487f507441a4fc20d99f3a5d34277aec201a20a7a3ba666b2f9701ed83e12f16a76324ecea99f76d7b87baf2651c3c82c81a283e219e18c19582cbcb9500a4114bc8841bc4605acf6c40a02f408fb05db57415cd3e2e5e55d3186046be4bfc59ce61744e7282a31d1a0fa42da98f518a3eac29dae98d86a9a5071e005ce0175f57f06b35575e2ce18c7377421c4307b0c2d2b1c4842dcc0f52427bc89bdbdb0a6989f6bf80781e6f0896f4107d456f0efb3d793e2aa9a1e9d6990ec5c99df0ecd6be71c20957eb34e80a15a2319b87542ebe16816c9b8cbb21eba11b2091c77e413141b9eefd54df118b401c3d9010795a1470de1aa3fcb40a106e35bd68272d38580ace5eaea52d7a03f60fa038d7c1498b3d6dcf851bad25c424f20e34db57eae786a92cb75e31ecb97a7e34aa9e63fac4e8066739f2de8ed19f371270ccc83a7a1ce24f981ada1ff37f09432a212010753973875514e89620b50d91c422a0a2f8c72ea69caea8dbdf153b24ed4020fe29fc38b8f44ed35e3e9382620cf469da6106b2afee26c02ba788967bad4a67b26677fab25e5e913421da0857ba82f80cf7a1be400dd97c5ffdb679fbc302ea8120bf0811857b9f8cac8d81ba76c872961a4329c271a9d878d08f44c562923e8ffec3db0eb9cf8c172c38cd4cdae0e8dee9660abc171337bd4437821402b8608e4b37006a1e570af5e1523deb3a9395c02632279177f115f8aa7fcd876e31edead09f084b36da78eec68760fd97026c584a60c85496e8ca9bb3a8931c0a2ca5c152a940e287321fce6d1fe17c519934bb182e709d14b8a96bf7710a69b75424f9bd87ee9e473527ecbeaafbe8838b799f60f98b187385fe77d07de9251cb052cac3a06ad90cf7ce3fedbc992c5403f7841306d6d2b061ba6b1921089eae9fbc74029f2850c8afcc42f7732d971fbe963046724c6b1d1dbae1e4412a880808487c22c4dfdcae63ac94c03464b5e81cd15bf57f219ab49285af30da27010bf0f71ecfe52cb7592b4eef96d0ec24dcb1fa3efb341b292b9b5bff8e7e5500448ba3cb90adfa288816658a390cd36dff0d21fa84fab788787d6fa1e9f1cf734a499ed349646cd13351c7af0760396b784b089c6c929860367bb272f468c8fc74eb211a6ecbcd53e1520ab63cdec934d3787de7131c984e3756539b0e795d718cdaf3492be6492489c8c2c9ca2d2e7280d49c7d047be68d3374bf3be2ce5b34b044d4f4dcdeb9103420bbb2acc28c2df074ab4a417ccd12373ed477ba5bf133cac7fecc6c297e10d58ee09bfa4033895b66ca3690e4dec07ba2cfbfc200c647c84fcf0b69ca09918005b3db96e1e2febaa8bb4133416b7c7b573f7bba0b695206091afb483e2825d987f0b442b33c340565db582582851ade1946e6682d4c897f447450a6f5f67977ccdf7dd996c61f934c88ab6d4efe080204666330a3089670e98e42b98d0c3d04180a0c2f6bbc463bccefa9167326de7b1bda983e5c359c0db6db07503791522fb282eebbc1a5a3ed6dca0a707977d467190f5eedcef2dbfd4406b92e2376a695425c34fd4c64981522ab198b5387b1159fb16d3997b48ca46ecf6d1c1cb72d57bc5385c343bbe2371cad1f5595335ff8febc7f5b4fee864aa645fdf3825f4454470d41979bc852dcff7316faecb682c97efad80d04b9fadd805077ce7f732605938f7e6abde959d331df3ff4f4d28d277e8d845980170faf0d638ee19e1a786439871d385327cd65fd9d3e021f00e89793f319e54b41dac3c1e9ddf74dd35dcaaa5c4e6995c46c480574bad2f351038722aec3cf041ede17dbb8bb704d1bac6bbea936a7a568f0b3424583c1db17c0df89c73ad6567cb83732dbaf8e432a8009b9fb61691a71125df7f5c63b7b50ccfd7bb2116d00c1fa3f91296ab86a920feadc93486bc13cf1e91f4e9ba3e5abef23f4e43636ccbfbee1b3f5f47de824cb02ed3eb8dd62f33cd7bd0b2c0fb47cfd991a2f57ee9c4030dd68371bdb22e914a203a4f94e2484c20eb89d590a9bd096aaa7e21bbae51d552dc038af0d3411404b8c48b5053b773adf69fd54f3a4fcb6aab4df624cb5e2a99ea836ac0ebe0516bde3212a56d5ae17845a57b4fbaeb041a748b131692996e28564ba0957702fd677883fed6a28c4ad419df87ac2d61e4ef08a5a2e4f2fdd8cac1700ee74dc94e1093b0e45b5b1f2c986d31cfbfcdbb996f39b3a533201076ef9ce4d8db1fa00f158d04e09ee128a722e028b0132135e08a940a0638eb5a3f056c248acbc21e4d889ccf98ba833105546c84c96a9b672a414513fd3eb6467addb7761f818b022a0072e0113a1e302fb7bc16d1c67a4c69fd6ed757d05030f00e3a2b46b5391069ca01c08eb1994302d9e9762b78552f7503db15292c830f072060571cb8c713265e8f6ecdf582f8d3277c8e9b3f284e536d00cf9725cb9c82ba99ed71961aac25462fe3a92b5f89829c64bb79c41420e0e057a528c6a356bf8cdca484b375af30498b48a58dd317c63e2087ba4f61df2f95562603cf21423a22d9215b6fa45fc13e28008b4ec3879a0ce8b4705e35769bc5f86cf67c5ccb1a1d6ea51fe8a17442dd08ab862b669ce7d5c96fc4f9cb2d298954bea33553ffd5e3407e0824f057118a3059f19f94321ebf5db7d2b901d357c0b3890b88fc7013830ff73bce3b562de52bd87d78944551af010fb33d330810239ce58e76a2eab3a2e5770fb5f9234c059d24ede8786256cf8e968ffd6b46e0408622d65fbeb9e7fbec8022b122762e22cc0f9be63f532e991449125a13860666acd3d139c17de6ee67dbd57ac274ff8141ec5c6e55fe69fd8a4bad6cdeea85b6e8256292ef6297581fd5792bf2a56b001ba6390b0fef76ab16b2352d717e1adbc7ad0454dea869a342aa778e9075e4e859e276578694ef30c2af7096be6fc96d8b1e2457adee21859053755b3e86e179f80a1163d73e435fc3e9f4dad3a68fb6681cc118c4d5c53d2169053cfcc994a20c529445c29dd3efc2c82a3586d5471a30d23ee39d6dfcdf2f6c9e20824fe3eb7097e466a7290880b4deb6088ad5c66698d10c9e890a35ee94daebd2dd431d9d287d846f9f490c94cb958a31ebd9ade110a45cd943b768c3f41862521cb9cf7d101edd5990c40d537fb5eabe184cb77336ca4e512cba31e51034cb9d5c3d867846be0ef069f034a30539a250c62c726d5898bdad9f450da329d101e77d47b5877777d7fcd6f13c81cf4a4dce5b68a8461545d3bd1a160fd702326afc4197dcaa4994a2864cb2d0e631dee9a0dce4e3e4b7f10742f3094f881d33468b42e4b5f950354a84e02f8b85400917897c1e66381f21d1b4b996ca2003479d698a04ef1bfe0daa952f8b13e5c4dcb8671c2c5eeac81022b587fcbfad111e37ce9547146f1abc20016b387ae594a0cad4961d15db5767134032c1467726d4c7587dccb2ce111efc733b70e0fe5e59d4b7ff07cc715ccbb2d76f742d4d13d3ba7b88fc64dd3a0144f10b6277c57bc6d16325737982061ba7d9caa4471d4abb8426144631e24cb443e2967e6a32f4c371ffa56d61235ed434b1da1d93191a14ee9b731231109146813510f6149b3ab9ce6d2d5d883baa4dd695b6bded2901f1fc6f44898b7556b02b131049b02421158c7d8348fd897e1bce640332a038c20758ac15dc6524d0145f5c415c06dad4cb9f2475c89b9e1eb3c839e77788ab5bba350a2fe81e82df582ce0a43041e1d238750ee8a4dfb6c80262883d992f558f3c6b49dd0014b8cc3e67a84a762d825d81b4f63d5eb49f8e3f13cdf08dbd0a380afc085a78970de669cbea7f762109611aae9bfe0d821bebd337c04800ad02686495d08094a9d9c4f11074744364f0153d094050cf1795af78e5e15f0842a7311ae653b3095eea19ea824f02d325fbfb01c40efbdaadcab35953ccedcc6dfe0de0954f42c30a89a0e244d3fbe7b25eaea546da7520f442b4ee20c5ed78b909b39c0bea26fcda985a87a76659c3106ddeebaf15bbfcfdc240a40257cd422ec059ecb2e9bb0ac144478d0b375437d5a67165571ed8884abebd8dc2ffa24f0030abd6b21d6c2a4f1215f5b09e2b24f957f5a8889073d82f34c7b31647f7b40744133d35b7a6c44f284b6b88ae3a0e80603379dd472dc0e5cba9d4805bb19aff4ab5a40df7daf35805d5d8c3f4fc7b13fe1450947827c1b1b62fb81d858149962451fe84389fed2880299568664b5ce572df21cbb2fdde7f71eae6a6987034f1750e4c0c9e88643e3151cf7a511ad9edd647fcee7d71c8e5b6512d2bb511494a4bcfc35941daada9bfe9afcc8e3ccecacb57e19795560f34665452bab4482834c5326920ced7d9fd2f43f9e02b27653e34cf8500315e9f7ee1b40161720ba0e05b286211c45cedde4a77838799d538752383caec58561d2d1f187c3ee655e751f0bb6000cb310998dc043fc3d2f5b6ea3be97a43e07af465fa60eb8b665c184dfa49f217cd1afe4d85e4f2c62790a7d82859a0bbb9ffa44ecd4419cf8be0db4643688c25f22493e4b6df0930c2b8b874d41655c983c0759177b99e11aa6c84266eb8495bc3614643900f5b99c1b5c22b695dc70d6cdd7ea4f1838b1ea6007bb275af4a6aa8b311974cb0518ff10f9db74ff6c3424afd3c04cd70659d6bded8e426e1430548f509d6cb1f1c18aa2b3253ac667e5e574f5cc995922070148eead13330edb2172900e8f95865c72ef7ac184a033ba9719eee6fada729db3f33690c704eb6d8b33abd8a98cb36506445319cdc5ded700d9e09b891a3ca4f756542368203181a2e1c61a6ce025c4f39ce07460095013a75eb264b4dca2404b14aafc09ed8f5646adc558dbf810752e42a6d862ce5f808d3c917c08d29e74a9469be6732150c8a76c3c0e8965a505123c3b682b7a8c0abfd7b6e51a244a208d211b8e81faac87335ad0f88a76d6a3c3ccf65dc1c1641dace9c907a0a4326a29175bc073ea6937eb3312ca7ef5c0b3959b580dbe6ef8c92986998dc402031ad418b0ee86cf304bb1d3d5542daa5345a9ae6f2d6f87675bc2c09a7bf05843da199f4c257a5aaebb7fd4578dcf22afb87bc70745db154fc9faff6a872d3dffffd3863e92127960fda31d6dd1fc17c227af519213f536c3c344a7c1f73dbc5f6eb62ae907d6ca0b72f4bbb48c8a1416f598c44300e8e639aad703d50c8fb21bc11976203cc7869b6d0114fe9558f46ab502b1688e39023d826c30a5b3641c1e3795e850bc9af8ef7bd64c1a8613711b18020ccdee1ebfd0165e194f1e000129937a60b14a63d18a88bdc07134a56e10874fe89fcf4d299eea8ee2a130ae892f8d199551c5f250f2e0ff5cce9155f", 0x1000, 0x1000}, {&(0x7f0000001400)="624c7e5780faec082b971a35fbc34472157fb62b4e4fbc4951f365f900e3fec2bc877b93cfccfb78b6dfc61f0c608f42d1391d734c37cf601efe575c1f2cb46cb857957ce969607d49a2873722ea0cfbbfa452c08df522256ef00dd61a3818ebd85ad76edaaa90261a8d59cdfd47219671852a5352eb93f8dda11794013ce3eafe0f7ea784dd5ac1b184e77715633e7b15b2d77126492060e8eb08447b4dcfb412276effbe96fdb921eb849423f83246fc8c608094f402781247bf8f21e8269cff045b6e793905026126e5630261e503172f81423abfe35d62d205ae52143c", 0xdf, 0x1b}, {&(0x7f0000001500)="e5b9bead4a9accc7fe588543b7d38cf0e4ddfb06dc48451e1701d80c8d773f47489eb7f1a080fa6d69d8103f4016543c594f5ad0b7b36c041d13fa257cf0935f5224041ee2208ec736f2358a1b763a66b5f3ae2cfb2977d01d9fd5adee577bf503af7414635ed348eb6c89c224d9c66bb6a257081309d9988e57", 0x7a, 0x8000}, {&(0x7f0000001580)="1cbf872b1ca6f5982db0b44fc480b4744ba4f6be96529e8ed1125770d09a7795d9eca7e7cea2fc54f784760856486df55cd4c6b73b1bc5a980e3f9291f5e214ff165a2e3df8e43fd4c1f80131f331704a5d476656e7b460880f470b9f86374f5500c8d88decc4abfa4361a7b755bee6a167190c480b1886dd20b36e0", 0x7c, 0x4}, {0x0, 0x0, 0x2}], 0x280000, &(0x7f00000016c0)={[{@dax}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@discard}, {@minixdf}, {@nolazytime}], [{@subj_type={'subj_type', 0x3d, 'ext2\x00'}}]}) 05:35:29 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x8000000, 0x0, 0x0, 0x20, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000008c0)=ANY=[@ANYBLOB="050023010001000000000000000000008fc1a0e0346da2657ed2c03759bf94775ac815db0895a7b3a29bc5b6d9b1512854780e1626e950b7c1b914fa3a21701a56d470290a6f69cf7d9a16f5e3b1b7401e21e5f9fbc6ec32782d5be943931f17ed217b88bd0400000000000000d724079420873cc6a874f123a3e25c9aceaac29cbcbe86cbbc8c9798c91c3064b18039b7a092f9fe851b2128859add1ee22ee93ba086c411961389e14e814787b75fa8bd6576d36347393d0478985f26f068d15c60ea19b18a5f050000007e1856ccb613cbdca9d43f4a329230aa24d549e818ad05d9917d2796d65c0ce04a2511daea1851681da5e59ef60e4e3ef69048eea8c9c35d1ea0ee7b6494a55a0ad4e542ce55c58429eb0279aa3450e6f4824ce0b5406ce02f592d1daac53636bf5919118c234a0abcefb158875ed0bebc5fe9985134c96ed8ded1dab59ccda7f0c3df66e80af285668ef3779958cdd0112f26cf3c1aeeaadd6ba3a7de5e762e300f053dcc01c67ebb02a8c4d8d6bc935c6c666ab6be8b8b3a026f843040dc72bd75a8834c82d445425b48bc30e4e6e65ffffa3087b4ad9b3fbada0200000000000000e206be3ef1a9cdf7f5eeecd4a9ceca1c18d207142e4474f1ad75ff94fe72ca4c20d4f3681520d4c6fe5c1322dffff3248b970cdbda0f001d60fa5fd1ccbb3d7560563c5063809899eeb2c656d678e35113a9fc97d4f72e7d84a42649f2595dbb5768a7550a084cbbac902a1ebbf42ad8c7b9effb0b51ed86467e02557ff6c2cb8c9b709a20111ade288b0abfe6003872a12cd82ccdc7b13381af5e3c", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:35:29 executing program 1: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) [ 2253.197150] EXT4-fs (sda): re-mounted. Opts: data=ordered,,errors=continue 05:35:29 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r3 = fork() r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xf0882, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r4, 0x8008f512, &(0x7f0000000100)) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f00000001c0)) 05:35:29 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:35:29 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0x0, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:35:29 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 47) 05:35:29 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3f000000, 0x0, 0x0) 05:35:29 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) [ 2253.230656] loop5: detected capacity change from 0 to 65536 [ 2253.244344] EXT4-fs (sda): re-mounted. Opts: data=ordered,,errors=continue [ 2253.249379] FAULT_INJECTION: forcing a failure. [ 2253.249379] name failslab, interval 1, probability 0, space 0, times 0 [ 2253.251130] CPU: 1 PID: 33718 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2253.251974] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2253.252998] Call Trace: [ 2253.253326] dump_stack+0x107/0x167 [ 2253.253772] should_fail.cold+0x5/0xa [ 2253.254242] ? create_object.isra.0+0x3a/0xa20 [ 2253.254807] should_failslab+0x5/0x20 [ 2253.255273] kmem_cache_alloc+0x5b/0x310 [ 2253.255767] create_object.isra.0+0x3a/0xa20 [ 2253.256308] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2253.256927] kmem_cache_alloc_bulk+0x168/0x320 [ 2253.257485] io_submit_sqes+0x6fe6/0x8610 [ 2253.258004] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2253.258614] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2253.259210] ? find_held_lock+0x2c/0x110 [ 2253.259711] ? io_submit_sqes+0x8610/0x8610 [ 2253.260249] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2253.260834] ? wait_for_completion_io+0x270/0x270 [ 2253.261426] ? rcu_read_lock_any_held+0x75/0xa0 [ 2253.261991] ? vfs_write+0x354/0xb10 [ 2253.262447] ? fput_many+0x2f/0x1a0 [ 2253.262892] ? ksys_write+0x1a9/0x260 [ 2253.263364] ? __ia32_sys_read+0xb0/0xb0 [ 2253.263861] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2253.264518] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2253.265137] do_syscall_64+0x33/0x40 [ 2253.265587] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2253.266209] RIP: 0033:0x7f0bbbb8ab19 [ 2253.266661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2253.268911] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2253.269840] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2253.270696] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2253.271561] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2253.272433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2253.273298] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:35:29 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x44280000, 0x0, 0x0) 05:35:29 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20a00, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000040)=ANY=[@ANYBLOB='Data=ordered,\x00']) 05:35:29 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="050000010001000000000000000000008fc1a0e0346da2657ed2c03759bf94775ac815db0895a7b3a29bc5b6d9b1512854781a56d470290a6f69cf7d9a16f5e3b1b7401e21e5f9fbc6ec32782d5be943931f17ed217b88bd0400000000000000d724079420873cc6a874f123a3e25c9aceaac29cbcbe86cbbc8c9798c91c3064b18039b7a092f9fe851b2128859add1ee22ee93ba086c411961389e14e814787b75fa8bd6576d36347393d0478985f66f068d15c60ea19b18a5ff6497ae37e1856ccb613e6dca9d43f4a329230aa24d549e818ad05d9917d2796d65c0ce06a2511daea0851681da5e59ef60e4e3ef69048eea8c9c35d1ea0ee7b6494a55a0ad4e542ce55c58429eb1879aa3450e6f4824ce0b5406ce02f592d1daac53636bf59", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:35:29 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) [ 2253.392722] EXT4-fs (sda): Unrecognized mount option "Data=ordered" or missing value 05:35:29 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) 05:35:29 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x45280000, 0x0, 0x0) 05:35:29 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000300)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x7}) 05:35:45 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 48) 05:35:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000080)=ANY=[@ANYBLOB="6461741fa0020e0000000064a62c00"]) 05:35:45 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0x0, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:35:45 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:35:45 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r3 = fork() r4 = open(&(0x7f0000000000)='./file1\x00', 0x10000, 0x84) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000100)) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:35:45 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="05000001d6368e000b000000000000000000008fc1a0e0346da2657e59bd94775ac815db0895a7b3a29b05000000000000001a56d470290a6f69cf7d9a16f5e3b1b7401e21e5f9fbc617ed217b88bd0400000000000024079421b6c61fa5c6189ae2ce4fd456ee2c055e873cc6a874f123a3e25c9aceaac29cbcbe4d16613d99fdee683064b18039b7a092f9fe851b2128859add1ee22e3bc411961389e14e814787b75fa8bd6576d36347393d0478985fa79034d266f068d15c60ea19b18a0000577ae3b613e6dca9d43f4a3292308d24d549e818ad02000000000000000ce06a2511daea0851681da5e59ef60e4e3ef690e542ce55c58429eb1879aa3650e6f4824ce0b5406ce02f59f70f00003636bf59e2b44685529a2b00"/297, @ANYRES64, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:35:45 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x46280000, 0x0, 0x0) 05:35:45 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(0xffffffffffffffff, &(0x7f0000000040)=""/55, 0x37, 0x0) [ 2269.614671] EXT4-fs (sda): Unrecognized mount option "dat " or missing value [ 2269.631790] EXT4-fs (sda): Unrecognized mount option "dat " or missing value [ 2269.637711] FAULT_INJECTION: forcing a failure. [ 2269.637711] name failslab, interval 1, probability 0, space 0, times 0 [ 2269.641506] CPU: 1 PID: 34140 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2269.642991] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2269.644784] Call Trace: [ 2269.645352] dump_stack+0x107/0x167 [ 2269.646126] should_fail.cold+0x5/0xa [ 2269.646940] ? create_object.isra.0+0x3a/0xa20 [ 2269.647915] should_failslab+0x5/0x20 [ 2269.648734] kmem_cache_alloc+0x5b/0x310 [ 2269.649603] ? mark_held_locks+0x9e/0xe0 [ 2269.650472] create_object.isra.0+0x3a/0xa20 [ 2269.651408] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2269.652507] kmem_cache_alloc_bulk+0x168/0x320 [ 2269.653489] io_submit_sqes+0x6fe6/0x8610 [ 2269.654402] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2269.655458] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2269.656502] ? find_held_lock+0x2c/0x110 [ 2269.657373] ? io_submit_sqes+0x8610/0x8610 [ 2269.658298] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2269.659321] ? wait_for_completion_io+0x270/0x270 [ 2269.660353] ? rcu_read_lock_any_held+0x75/0xa0 [ 2269.661359] ? vfs_write+0x354/0xb10 [ 2269.662150] ? fput_many+0x2f/0x1a0 [ 2269.662924] ? ksys_write+0x1a9/0x260 [ 2269.663734] ? __ia32_sys_read+0xb0/0xb0 [ 2269.664627] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2269.665744] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2269.666838] do_syscall_64+0x33/0x40 [ 2269.667630] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2269.668732] RIP: 0033:0x7f0bbbb8ab19 [ 2269.669528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2269.673465] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2269.675084] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2269.676625] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2269.678140] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2269.679658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2269.681177] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:35:45 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(0xffffffffffffffff, &(0x7f0000000040)=""/55, 0x37, 0x0) 05:35:45 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000080)='.log\x00', 0x402000, 0x0) unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x200) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000040)={[{@data_ordered}]}) 05:35:45 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x12) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="050000010001000000000000000000008fc1a0e0346da2657ed2c03759bf94775ac815db0895a7b3a29bc5b6d9b1512854781a56d470290a6f69cf7d9a16f5e3b1b7401e29e5f9fbc6ec32782d5be943931f17ed217b88bd0400000000000000d724079420873cc6a874f123a3e25c9aceaac29cbcbe86cbbc8c9798c91c3064b18039b7a092f9fe851b2128859add1ee22ee93ba086c411961389e14e814787b75fa8bd6576d36347393d0478985f66f068d15c60ea19b18a5ff6497ae37e1856ccb613e6dca9d43f4a329230aa24d549e818ad05d9917d2796d65c0ce06a2511daea0851681da5e59ef60e4e3ef69048eea8c9c35d1ea0ee7b6494a55a0ad4e542ce55c58429eb1879aa3450e6f4824ce0b5406ce02f592d1daac53636bf59", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:35:45 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(0xffffffffffffffff, &(0x7f0000000040)=""/55, 0x37, 0x0) [ 2269.874790] EXT4-fs (sda): re-mounted. Opts: data=ordered,,errors=continue [ 2269.893806] EXT4-fs (sda): re-mounted. Opts: data=ordered,,errors=continue 05:35:45 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x47280000, 0x0, 0x0) 05:35:45 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000040)={[{@data_ordered}]}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x43, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0/../file0\x00'}) 05:35:46 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x20b000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r3 = fork() ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:35:46 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 49) 05:35:46 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, 0x0, 0x0, 0x0) [ 2270.105599] EXT4-fs (sda): re-mounted. Opts: data=ordered,,errors=continue [ 2270.118607] EXT4-fs (sda): re-mounted. Opts: data=ordered,,errors=continue [ 2270.146877] FAULT_INJECTION: forcing a failure. [ 2270.146877] name failslab, interval 1, probability 0, space 0, times 0 [ 2270.149479] CPU: 0 PID: 34408 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2270.150948] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2270.152694] Call Trace: [ 2270.153262] dump_stack+0x107/0x167 [ 2270.154035] should_fail.cold+0x5/0xa [ 2270.154841] ? create_object.isra.0+0x3a/0xa20 [ 2270.155807] should_failslab+0x5/0x20 [ 2270.156622] kmem_cache_alloc+0x5b/0x310 [ 2270.157488] ? mark_held_locks+0x9e/0xe0 [ 2270.158349] create_object.isra.0+0x3a/0xa20 [ 2270.159276] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2270.160386] kmem_cache_alloc_bulk+0x168/0x320 [ 2270.161356] io_submit_sqes+0x6fe6/0x8610 [ 2270.162259] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2270.163317] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2270.164336] ? find_held_lock+0x2c/0x110 [ 2270.165205] ? io_submit_sqes+0x8610/0x8610 [ 2270.166118] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2270.167134] ? wait_for_completion_io+0x270/0x270 [ 2270.168150] ? rcu_read_lock_any_held+0x75/0xa0 [ 2270.169141] ? vfs_write+0x354/0xb10 [ 2270.169933] ? fput_many+0x2f/0x1a0 [ 2270.170704] ? ksys_write+0x1a9/0x260 [ 2270.171512] ? __ia32_sys_read+0xb0/0xb0 [ 2270.172378] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2270.173481] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2270.174565] do_syscall_64+0x33/0x40 [ 2270.175348] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2270.176442] RIP: 0033:0x7f0bbbb8ab19 [ 2270.177227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2270.181112] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2270.182722] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2270.184237] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2270.185751] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2270.187255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2270.188763] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:36:01 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xe4ffffff, 0x0, 0x0) 05:36:01 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:36:01 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x0, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:36:01 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, 0x0, 0x0, 0x0) 05:36:01 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x2a}}, 0xfffffffffffffdb4) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:36:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x40400, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000040)={[{@data_ordered}]}) 05:36:01 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') r4 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) dup(r4) pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="74cd6872616e733d66642c7266646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c63616368653d6d01f0702c63616368b5a5d857624379da75af01ea9d700000000000df746c36a4f36658a73d56129079cebcdc3aa6b899d9981a26890c217f2e10fe5c00cf06ca920b0818213b4cb984d6617c2862e1a390cb6ea2699c5b35ec059c63afe603430f6021604f98e931e2"]) r6 = fork() ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r7, &(0x7f0000000280)=0x80, &(0x7f00000002c0)=@rc={0x1f, @none}}, 0x40) 05:36:01 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 50) 05:36:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x80802, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x200000, 0x0) [ 2285.832841] FAULT_INJECTION: forcing a failure. [ 2285.832841] name failslab, interval 1, probability 0, space 0, times 0 [ 2285.835515] CPU: 0 PID: 34608 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2285.837067] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2285.838920] Call Trace: [ 2285.839534] dump_stack+0x107/0x167 [ 2285.840361] should_fail.cold+0x5/0xa [ 2285.841235] ? create_object.isra.0+0x3a/0xa20 [ 2285.842296] should_failslab+0x5/0x20 [ 2285.843187] kmem_cache_alloc+0x5b/0x310 [ 2285.844135] create_object.isra.0+0x3a/0xa20 [ 2285.845139] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2285.846320] kmem_cache_alloc+0x159/0x310 [ 2285.847291] alloc_pid+0xd7/0xd30 [ 2285.848104] ? copy_namespaces+0x1ca/0x4f0 [ 2285.849101] copy_process+0x3b87/0x78b0 [ 2285.850033] ? stack_trace_save+0x8c/0xc0 [ 2285.850999] ? stack_trace_consume_entry+0x160/0x160 [ 2285.852189] ? __cleanup_sighand+0xb0/0xb0 [ 2285.853156] ? do_syscall_64+0x33/0x40 [ 2285.854057] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2285.855302] ? lock_acquire+0x197/0x470 [ 2285.856225] ? create_object.isra.0+0x3ad/0xa20 [ 2285.857318] ? lock_release+0x680/0x680 [ 2285.858244] ? find_held_lock+0x2c/0x110 [ 2285.859198] ? io_wqe_dec_running+0x220/0x220 [ 2285.860244] create_io_thread+0xb6/0xf0 [ 2285.861177] ? pidfd_prepare+0x80/0x80 [ 2285.862086] ? mark_held_locks+0x9e/0xe0 [ 2285.863041] ? io_wqe_dec_running+0x220/0x220 [ 2285.864100] ? __init_swait_queue_head+0xc6/0x150 [ 2285.865241] create_io_worker+0x23a/0x690 [ 2285.866211] io_wqe_enqueue+0x69e/0xbe0 [ 2285.867143] ? create_worker_cb+0x260/0x260 [ 2285.868146] ? io_prep_async_work+0x340/0x550 [ 2285.869257] io_queue_async_work+0x26b/0x4f0 [ 2285.870282] __io_queue_sqe+0x5cc/0x9d0 [ 2285.871215] ? io_issue_sqe+0x77b0/0x77b0 [ 2285.872181] ? __fget_files+0x2f8/0x520 [ 2285.873126] io_submit_sqes+0x44aa/0x8610 [ 2285.874122] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2285.875276] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2285.876392] ? find_held_lock+0x2c/0x110 [ 2285.877346] ? io_submit_sqes+0x8610/0x8610 [ 2285.878349] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2285.879455] ? wait_for_completion_io+0x270/0x270 [ 2285.880549] ? rcu_read_lock_any_held+0x75/0xa0 [ 2285.881641] ? vfs_write+0x354/0xb10 [ 2285.882507] ? fput_many+0x2f/0x1a0 [ 2285.883354] ? ksys_write+0x1a9/0x260 [ 2285.884240] ? __ia32_sys_read+0xb0/0xb0 [ 2285.885199] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2285.886412] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2285.887605] do_syscall_64+0x33/0x40 [ 2285.888471] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2285.889663] RIP: 0033:0x7f0bbbb8ab19 [ 2285.890509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2285.894714] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2285.896447] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2285.898097] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2285.899758] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2285.901396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2285.903019] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:36:01 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, 0x0, 0x0, 0x0) 05:36:01 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xea4f0000, 0x0, 0x0) 05:36:01 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@private2}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) [ 2299.558697] FAULT_INJECTION: forcing a failure. [ 2299.558697] name failslab, interval 1, probability 0, space 0, times 0 [ 2299.560322] CPU: 1 PID: 34942 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2299.561204] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2299.562242] Call Trace: [ 2299.562583] dump_stack+0x107/0x167 [ 2299.563037] should_fail.cold+0x5/0xa [ 2299.563509] ? create_object.isra.0+0x3a/0xa20 [ 2299.564077] should_failslab+0x5/0x20 [ 2299.564549] kmem_cache_alloc+0x5b/0x310 [ 2299.565063] ? mark_held_locks+0x9e/0xe0 [ 2299.565575] create_object.isra.0+0x3a/0xa20 [ 2299.566117] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2299.566751] kmem_cache_alloc_bulk+0x168/0x320 [ 2299.567331] io_submit_sqes+0x6fe6/0x8610 [ 2299.567863] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2299.568487] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2299.569095] ? find_held_lock+0x2c/0x110 [ 2299.569601] ? io_submit_sqes+0x8610/0x8610 [ 2299.570145] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2299.570747] ? wait_for_completion_io+0x270/0x270 [ 2299.571362] ? rcu_read_lock_any_held+0x75/0xa0 [ 2299.571948] ? vfs_write+0x354/0xb10 [ 2299.572408] ? fput_many+0x2f/0x1a0 [ 2299.572867] ? ksys_write+0x1a9/0x260 [ 2299.573341] ? __ia32_sys_read+0xb0/0xb0 [ 2299.573845] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2299.574496] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2299.575134] do_syscall_64+0x33/0x40 [ 2299.575610] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2299.576252] RIP: 0033:0x7f0bbbb8ab19 [ 2299.576720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2299.579305] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2299.580248] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2299.581144] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2299.582030] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2299.582902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2299.583782] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 [ 2299.591530] EXT4-fs (sda): Unrecognized mount option "dated" or missing value [ 2299.601756] EXT4-fs (sda): Unrecognized mount option "dated" or missing value 05:36:15 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x0, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:36:15 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xec4f0000, 0x0, 0x0) 05:36:15 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:36:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8834, &(0x7f0000000040)=ANY=[@ANYBLOB='dated,\b']) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x3f7, 0x300, 0x70bd2b, 0x25dfdbfe, {0x7, 0x10, './file0', './file0/../file0'}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80050}, 0x4000041) umount2(&(0x7f0000000280)='./file0\x00', 0x0) 05:36:15 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xb3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:36:15 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 51) 05:36:15 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f4f, &(0x7f0000000080)={0x0, 0xffbffffc, 0x2, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000001c0)) r1 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(r1, &(0x7f0000000100)='net/ip6_tables_targets\x00') pread64(r4, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1/file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000002, 0x30, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r6, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x5fc7, &(0x7f0000000280)={0x0, 0xa2e7, 0x20, 0x1, 0x48, 0x0, r6}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000300)) r7 = fork() ptrace$getregset(0x4204, r7, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:36:15 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:36:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000040)={[{@data_ordered}]}) [ 2299.837315] EXT4-fs (sda): re-mounted. Opts: data=ordered,,errors=continue 05:36:15 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) [ 2299.841842] EXT4-fs (sda): re-mounted. Opts: data=ordered,,errors=continue 05:36:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x5, 0x0, 0x0, 0x404, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1a8024, &(0x7f0000000040)={[{@data_ordered}]}) 05:36:15 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xed4f0000, 0x0, 0x0) 05:36:15 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 52) [ 2299.967403] EXT4-fs (sda): re-mounted. Opts: data=ordered,,errors=continue 05:36:16 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:36:16 executing program 5: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:36:16 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchmodat(r0, &(0x7f0000000000)='./file1\x00', 0x100) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r4 = fork() ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) [ 2300.116664] FAULT_INJECTION: forcing a failure. [ 2300.116664] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2300.119699] CPU: 0 PID: 35195 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2300.121275] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2300.123154] Call Trace: [ 2300.123751] dump_stack+0x107/0x167 [ 2300.124580] should_fail.cold+0x5/0xa [ 2300.125461] __alloc_pages_nodemask+0x182/0x600 [ 2300.126519] ? lock_downgrade+0x6d0/0x6d0 [ 2300.127462] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2300.128837] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2300.130014] ? kmem_cache_alloc_node+0x2bc/0x330 [ 2300.131090] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2300.132296] copy_process+0x62b/0x78b0 [ 2300.133206] ? stack_trace_save+0x8c/0xc0 [ 2300.134148] ? stack_trace_consume_entry+0x160/0x160 [ 2300.135304] ? kasan_save_stack+0x32/0x40 [ 2300.136252] ? __cleanup_sighand+0xb0/0xb0 [ 2300.137215] ? do_syscall_64+0x33/0x40 [ 2300.138100] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2300.139307] ? lock_acquire+0x197/0x470 [ 2300.140206] ? create_object.isra.0+0x3ad/0xa20 [ 2300.141270] ? lock_release+0x680/0x680 [ 2300.142169] ? find_held_lock+0x2c/0x110 [ 2300.143098] ? io_wqe_dec_running+0x220/0x220 [ 2300.144115] create_io_thread+0xb6/0xf0 [ 2300.145029] ? pidfd_prepare+0x80/0x80 [ 2300.145911] ? mark_held_locks+0x9e/0xe0 [ 2300.146840] ? io_wqe_dec_running+0x220/0x220 [ 2300.147871] ? __init_swait_queue_head+0xc6/0x150 [ 2300.148977] create_io_worker+0x23a/0x690 [ 2300.149925] io_wqe_enqueue+0x69e/0xbe0 [ 2300.150836] ? create_worker_cb+0x260/0x260 [ 2300.151818] ? io_prep_async_work+0x340/0x550 [ 2300.152850] io_queue_async_work+0x26b/0x4f0 [ 2300.153858] __io_queue_sqe+0x5cc/0x9d0 [ 2300.154771] ? io_issue_sqe+0x77b0/0x77b0 [ 2300.155712] ? __fget_files+0x2f8/0x520 [ 2300.156629] io_submit_sqes+0x44aa/0x8610 [ 2300.157607] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2300.158743] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2300.159844] ? find_held_lock+0x2c/0x110 [ 2300.160785] ? io_submit_sqes+0x8610/0x8610 [ 2300.161773] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2300.162867] ? wait_for_completion_io+0x270/0x270 [ 2300.163965] ? rcu_read_lock_any_held+0x75/0xa0 [ 2300.165026] ? vfs_write+0x354/0xb10 [ 2300.165870] ? fput_many+0x2f/0x1a0 [ 2300.166697] ? ksys_write+0x1a9/0x260 [ 2300.167560] ? __ia32_sys_read+0xb0/0xb0 [ 2300.168484] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2300.169691] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2300.170862] do_syscall_64+0x33/0x40 [ 2300.171706] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2300.172877] RIP: 0033:0x7f0bbbb8ab19 [ 2300.173729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2300.177912] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2300.179634] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2300.181267] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2300.182897] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2300.184525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2300.186160] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:36:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x0, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:36:30 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000128be020000000000000000008fc1a0e0346da2657ed2c03759bf94775ac815db0895a7b3a29bc5b6d9b1512854781a56d470290a6f69cf7d9a16f5e3b1b7401e21e5f9fbc6ec32782d5be943931f17ed217b88bd0400000000000000d724079420873cc6a874f123a3e25c9aceaac29cbcbe86cbbc8c9798c91c3064b18039b7a092f9fe851b2128859add1ee22ee93ba086c411961389e14e814787b75fa8bd6576d36347393d0478985f66f068d15c60ea19b18a5ff6497ae37e1856ccb613e6dca9d43f4a329230aa24d549e818ad05d9917d2796d65c0ce06a2511daea0851681d000000003366beec9048eea8c9c35d1ea0ee7b6494a55a0ad4e542ce55c58429eb1879aa3450e6f4824ce0b5406ce02f592d1daac53636bf59", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:36:30 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:36:30 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000001c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000080)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000002280)={{r3}, r4, 0x4, @unused=[0x9, 0x3, 0x3f, 0x200], @subvolid=0x1}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c1c52646e3c2c", @ANYRESHEX=r2, @ANYBLOB=',cache=mmap,cache=none,\x00']) r5 = fork() ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r6 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r6, &(0x7f0000000040)=""/55, 0x37, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000000000)={'macvlan1\x00', {0x2, 0x0, @multicast1}}) 05:36:30 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xee4f0000, 0x0, 0x0) 05:36:30 executing program 5: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0xc0189436, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:36:30 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 53) 05:36:30 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) [ 2314.520470] FAULT_INJECTION: forcing a failure. [ 2314.520470] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2314.522130] CPU: 0 PID: 35508 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2314.523003] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2314.524047] Call Trace: [ 2314.524390] dump_stack+0x107/0x167 [ 2314.524847] should_fail.cold+0x5/0xa [ 2314.525343] __alloc_pages_nodemask+0x182/0x600 [ 2314.525915] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2314.526695] alloc_pages_current+0x187/0x280 [ 2314.527244] allocate_slab+0x26f/0x380 [ 2314.527735] ___slab_alloc+0x470/0x700 [ 2314.528227] ? io_submit_sqes+0x6fe6/0x8610 [ 2314.528780] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 2314.529385] kmem_cache_alloc_bulk+0x1ec/0x320 [ 2314.529962] io_submit_sqes+0x6fe6/0x8610 [ 2314.530502] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2314.531132] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2314.531751] ? find_held_lock+0x2c/0x110 [ 2314.532254] ? io_submit_sqes+0x8610/0x8610 [ 2314.532790] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2314.533402] ? wait_for_completion_io+0x270/0x270 [ 2314.534017] ? rcu_read_lock_any_held+0x75/0xa0 [ 2314.534583] ? vfs_write+0x354/0xb10 [ 2314.535035] ? fput_many+0x2f/0x1a0 [ 2314.535495] ? ksys_write+0x1a9/0x260 [ 2314.535977] ? __ia32_sys_read+0xb0/0xb0 [ 2314.536480] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2314.537143] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2314.537488] 9pnet: Insufficient options for proto=fd [ 2314.537791] do_syscall_64+0x33/0x40 [ 2314.539341] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2314.539977] RIP: 0033:0x7f0bbbb8ab19 [ 2314.540447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2314.542766] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2314.543728] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2314.544619] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2314.545512] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2314.546377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2314.547275] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:36:30 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xffffff7f, 0x0, 0x0) 05:36:30 executing program 5: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x80108906, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="050000010001000000000000000000008fc1a0e0346da2657ed2c03759bf94775ac815db0895a7b3a29bc5b6d9b1512854781a56d470290a6f69cf7d9a16f5e3b1b7401e21e5f9fbc6ec32782d5be943931f17ed217b88bd0400000000000000d724079420873cc6a874f123a3e25c9aceaac29cbcbe86cbbc8c9798c91c3064b18039b7a092f9fe851b2128859add1ee22ee93ba086c411961389e14e814787b75fa8bd6576d36347393d0478985f66f068d15c60ea19b18a5ff6497ae37e1856ccb613e6dca9d43f4a329230aa24d549e818ad05d9917d2796d65c0ce06a2511daea0851681da5e59ef60e4e3ef69048eea8c9c35d1ea0ee7b6494a55a0ad4e542ce55c58429eb1879aa3450e6f4824ce0b5406ce02f592d1daac53636bf59", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:36:30 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x2, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:36:30 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x3f000000, 0x0, 0x0, 0x0) 05:36:30 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 54) 05:36:30 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x8, 0x1f, 0x8b34}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:36:30 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffe4, 0x0, 0x0) 05:36:30 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x200000, 0x0, 0x0, 0x0) [ 2314.945490] FAULT_INJECTION: forcing a failure. [ 2314.945490] name failslab, interval 1, probability 0, space 0, times 0 [ 2314.948231] CPU: 1 PID: 35752 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2314.949827] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2314.951692] Call Trace: [ 2314.952291] dump_stack+0x107/0x167 [ 2314.953145] should_fail.cold+0x5/0xa [ 2314.954004] ? create_object.isra.0+0x3a/0xa20 [ 2314.955041] should_failslab+0x5/0x20 [ 2314.955902] kmem_cache_alloc+0x5b/0x310 [ 2314.956823] ? mark_held_locks+0x9e/0xe0 [ 2314.957777] create_object.isra.0+0x3a/0xa20 [ 2314.958776] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2314.959926] kmem_cache_alloc_bulk+0x168/0x320 [ 2314.960995] io_submit_sqes+0x6fe6/0x8610 [ 2314.961973] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2314.963093] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2314.964185] ? find_held_lock+0x2c/0x110 [ 2314.965130] ? io_submit_sqes+0x8610/0x8610 [ 2314.966115] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2314.967197] ? wait_for_completion_io+0x270/0x270 [ 2314.968290] ? rcu_read_lock_any_held+0x75/0xa0 [ 2314.969353] ? vfs_write+0x354/0xb10 [ 2314.970192] ? fput_many+0x2f/0x1a0 [ 2314.971019] ? ksys_write+0x1a9/0x260 [ 2314.971883] ? __ia32_sys_read+0xb0/0xb0 [ 2314.972802] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2314.974016] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2314.975179] do_syscall_64+0x33/0x40 [ 2314.976022] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2314.977206] RIP: 0033:0x7f0bbbb8ab19 [ 2314.978046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2314.982226] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2314.983947] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2314.985583] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2314.987199] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2314.988802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2314.990442] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:36:44 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:36:44 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:36:44 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xbe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@remote, r5}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:36:44 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 55) 05:36:44 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x0, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:36:44 executing program 5: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdnk=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap,cnone,\x00\x00\x00\x00\x00\x00']) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r4, &(0x7f0000000040)=""/55, 0x37, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) statx(r0, &(0x7f00000001c0)='./file1\x00', 0x4800, 0x400, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x10400, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '-,:+]\\'}}, {@dfltgid={'dfltgid', 0x3d, r6}}, {@privport}, {@cache_loose}], [{@permit_directio}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fsname={'fsname', 0x3d, '\\[!{'}}, {@subj_role={'subj_role', 0x3d, '('}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}, {@dont_appraise}]}}) r7 = fork() ptrace(0x11, r7) ptrace$getregset(0x4204, r7, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) tkill(r7, 0x14) 05:36:44 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/55, 0x37, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x8, 0x8, 0x0, 0x10000, 0x204, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xb, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x4600, 0x2, 0x3, 0x6, 0xa79, 0xffffff7f, 0x3, 0x0, 0x7}, r0, 0x2, r1, 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r4, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r5 = fork() ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:36:44 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x1000000000000, 0x0, 0x0) [ 2328.919355] FAULT_INJECTION: forcing a failure. [ 2328.919355] name failslab, interval 1, probability 0, space 0, times 0 [ 2328.920825] CPU: 1 PID: 35871 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2328.921680] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2328.922683] Call Trace: [ 2328.922998] dump_stack+0x107/0x167 [ 2328.923427] should_fail.cold+0x5/0xa [ 2328.923884] ? create_object.isra.0+0x3a/0xa20 [ 2328.924440] should_failslab+0x5/0x20 [ 2328.924897] kmem_cache_alloc+0x5b/0x310 [ 2328.925409] ? mark_held_locks+0x9e/0xe0 [ 2328.925886] create_object.isra.0+0x3a/0xa20 [ 2328.926411] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2328.927023] kmem_cache_alloc_bulk+0x168/0x320 [ 2328.927567] io_submit_sqes+0x6fe6/0x8610 [ 2328.928069] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2328.928670] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2328.929257] ? find_held_lock+0x2c/0x110 [ 2328.929747] ? io_submit_sqes+0x8610/0x8610 [ 2328.930277] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2328.930850] ? wait_for_completion_io+0x270/0x270 [ 2328.931416] ? rcu_read_lock_any_held+0x75/0xa0 [ 2328.931964] ? vfs_write+0x354/0xb10 [ 2328.932408] ? fput_many+0x2f/0x1a0 [ 2328.932840] ? ksys_write+0x1a9/0x260 [ 2328.933309] ? __ia32_sys_read+0xb0/0xb0 [ 2328.933790] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2328.934423] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2328.935029] do_syscall_64+0x33/0x40 [ 2328.935477] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2328.936087] RIP: 0033:0x7f0bbbb8ab19 [ 2328.936532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2328.938737] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2328.939629] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2328.940471] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2328.941316] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2328.942149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2328.942981] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 [ 2328.964566] 9pnet: Insufficient options for proto=fd 05:36:44 executing program 5: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdnk=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap,cnone,\x00\x00\x00\x00\x00\x00']) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r4, &(0x7f0000000040)=""/55, 0x37, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) statx(r0, &(0x7f00000001c0)='./file1\x00', 0x4800, 0x400, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x10400, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '-,:+]\\'}}, {@dfltgid={'dfltgid', 0x3d, r6}}, {@privport}, {@cache_loose}], [{@permit_directio}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fsname={'fsname', 0x3d, '\\[!{'}}, {@subj_role={'subj_role', 0x3d, '('}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}, {@dont_appraise}]}}) r7 = fork() ptrace(0x11, r7) ptrace$getregset(0x4204, r7, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) tkill(r7, 0x14) 05:36:45 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 56) 05:36:45 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) [ 2329.117582] FAULT_INJECTION: forcing a failure. [ 2329.117582] name failslab, interval 1, probability 0, space 0, times 0 [ 2329.118964] CPU: 1 PID: 35988 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2329.119749] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2329.120697] Call Trace: [ 2329.121002] dump_stack+0x107/0x167 [ 2329.121427] should_fail.cold+0x5/0xa [ 2329.121864] ? create_object.isra.0+0x3a/0xa20 [ 2329.122391] should_failslab+0x5/0x20 [ 2329.122825] kmem_cache_alloc+0x5b/0x310 [ 2329.123300] create_object.isra.0+0x3a/0xa20 [ 2329.123803] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2329.124378] kmem_cache_alloc_bulk+0x168/0x320 [ 2329.124903] io_submit_sqes+0x6fe6/0x8610 [ 2329.125393] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2329.125965] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2329.126520] ? find_held_lock+0x2c/0x110 [ 2329.126978] ? io_submit_sqes+0x8610/0x8610 [ 2329.127466] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2329.128009] ? wait_for_completion_io+0x270/0x270 [ 2329.128554] ? rcu_read_lock_any_held+0x75/0xa0 [ 2329.129074] ? vfs_write+0x354/0xb10 [ 2329.129517] ? fput_many+0x2f/0x1a0 [ 2329.129933] ? ksys_write+0x1a9/0x260 [ 2329.130374] ? __ia32_sys_read+0xb0/0xb0 [ 2329.130837] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2329.131436] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2329.132026] do_syscall_64+0x33/0x40 [ 2329.132454] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2329.133031] RIP: 0033:0x7f0bbbb8ab19 [ 2329.133465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2329.135556] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2329.136415] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2329.137239] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2329.138050] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2329.138862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2329.139679] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 [ 2329.150686] 9pnet: Insufficient options for proto=fd 05:36:45 executing program 5: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdnk=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap,cnone,\x00\x00\x00\x00\x00\x00']) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r4, &(0x7f0000000040)=""/55, 0x37, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) statx(r0, &(0x7f00000001c0)='./file1\x00', 0x4800, 0x400, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x10400, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '-,:+]\\'}}, {@dfltgid={'dfltgid', 0x3d, r6}}, {@privport}, {@cache_loose}], [{@permit_directio}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fsname={'fsname', 0x3d, '\\[!{'}}, {@subj_role={'subj_role', 0x3d, '('}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}, {@dont_appraise}]}}) r7 = fork() ptrace(0x11, r7) ptrace$getregset(0x4204, r7, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) tkill(r7, 0x14) 05:36:45 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000000000, 0x0, 0x0) [ 2329.302305] 9pnet: Insufficient options for proto=fd 05:36:45 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 57) 05:36:45 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000040)={@empty, 0xfffffffd, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYRES64=r2, @ANYRESDEC=r0, @ANYBLOB="4aa1d1192462608a0a06292a646cc605f37d87b8d725095b5b0f9b431b6c85ffc4c2f8d1b993d0447cadf43147da7d49cdbabe8e1882a4c9b56d2f2af632bac4b56550e5cd8a423c732c76e3dfa565ae4f9f48db0f8072cbf0b256e9d0474e6893ebec210debee8973a465ef5c730a2cc2c796350837802dd3745e8efc18bf394601bfd876a0f5bdd0db7b7a74e5cf5c209c0e6d7f0ac24ee7f638ef8b48172b3c"]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}) 05:36:45 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2329.374074] FAULT_INJECTION: forcing a failure. [ 2329.374074] name failslab, interval 1, probability 0, space 0, times 0 [ 2329.375452] CPU: 1 PID: 36125 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2329.376242] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2329.377202] Call Trace: [ 2329.377513] dump_stack+0x107/0x167 [ 2329.377936] should_fail.cold+0x5/0xa [ 2329.378379] ? create_object.isra.0+0x3a/0xa20 [ 2329.378905] should_failslab+0x5/0x20 [ 2329.379341] kmem_cache_alloc+0x5b/0x310 [ 2329.379811] create_object.isra.0+0x3a/0xa20 [ 2329.380313] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2329.380888] kmem_cache_alloc_bulk+0x168/0x320 [ 2329.381428] io_submit_sqes+0x6fe6/0x8610 [ 2329.381919] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2329.382478] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2329.383035] ? find_held_lock+0x2c/0x110 [ 2329.383506] ? io_submit_sqes+0x8610/0x8610 [ 2329.384004] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2329.384555] ? wait_for_completion_io+0x270/0x270 [ 2329.385116] ? rcu_read_lock_any_held+0x75/0xa0 [ 2329.385653] ? vfs_write+0x354/0xb10 [ 2329.386082] ? fput_many+0x2f/0x1a0 [ 2329.386503] ? ksys_write+0x1a9/0x260 [ 2329.386940] ? __ia32_sys_read+0xb0/0xb0 [ 2329.387408] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2329.388000] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2329.388591] do_syscall_64+0x33/0x40 [ 2329.389023] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2329.389621] RIP: 0033:0x7f0bbbb8ab19 [ 2329.390048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2329.392146] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2329.393010] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2329.393834] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2329.394634] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2329.395435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2329.396233] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:37:00 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 58) 05:37:00 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000002c0)={0x5, 0x28, '\x00', 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') syz_io_uring_setup(0x7135, &(0x7f00000001c0)={0x0, 0xeae3, 0x20, 0x3, 0x32f}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r4 = fork() ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:37:00 executing program 6: ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000040)=0x7fff) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:37:00 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x40000000000000, 0x0, 0x0) 05:37:00 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:37:00 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:37:00 executing program 1: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x4528, 0x0, 0x0, 0x0) 05:37:00 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x0, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) [ 2344.417411] FAULT_INJECTION: forcing a failure. [ 2344.417411] name failslab, interval 1, probability 0, space 0, times 0 [ 2344.418999] CPU: 1 PID: 36247 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2344.419897] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2344.420970] Call Trace: [ 2344.421318] dump_stack+0x107/0x167 [ 2344.421783] should_fail.cold+0x5/0xa [ 2344.422293] ? create_object.isra.0+0x3a/0xa20 [ 2344.422889] should_failslab+0x5/0x20 [ 2344.423372] kmem_cache_alloc+0x5b/0x310 [ 2344.423897] create_object.isra.0+0x3a/0xa20 [ 2344.424460] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2344.425113] kmem_cache_alloc_bulk+0x168/0x320 [ 2344.425719] io_submit_sqes+0x6fe6/0x8610 [ 2344.426270] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2344.426908] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2344.427532] ? find_held_lock+0x2c/0x110 [ 2344.428061] ? io_submit_sqes+0x8610/0x8610 [ 2344.428614] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2344.429229] ? wait_for_completion_io+0x270/0x270 [ 2344.429850] ? rcu_read_lock_any_held+0x75/0xa0 [ 2344.430450] ? vfs_write+0x354/0xb10 [ 2344.430933] ? fput_many+0x2f/0x1a0 [ 2344.431406] ? ksys_write+0x1a9/0x260 [ 2344.431888] ? __ia32_sys_read+0xb0/0xb0 [ 2344.432407] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2344.433072] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2344.433748] do_syscall_64+0x33/0x40 [ 2344.434221] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2344.434879] RIP: 0033:0x7f0bbbb8ab19 [ 2344.435362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2344.437721] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2344.438704] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2344.439621] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2344.440543] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2344.441458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2344.442373] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:37:00 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x80, 0x5, 0x7, 0x0, 0x8, 0x83824, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xa1, 0x0, @perf_config_ext={0x10000, 0x3f}, 0x900, 0x400, 0x4, 0x3, 0x1, 0x3, 0xa0, 0x0, 0x5ef2, 0x0, 0x8000}, 0xffffffffffffffff, 0x6, r0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r4 = fork() ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:37:00 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000640)={0x5}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@mcast2, r5}, 0xfffffffffffffec4) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:37:00 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x200000000000000, 0x0, 0x0) 05:37:00 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 59) 05:37:00 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="050000010001000000000000000000008fc1a0e0346da2657ed2c03759bf94775ac815db0895a7b3a29bc5b6d9b1512854781a56d470290a6f69cf7d9a16f5e3b1b7401e21e5f9fbc6ec32782d5be943931f17ed217b88bd0400000000000000d724079420873cc6a874f123a3e25c9ace84ec9cbcbe86cbbc8c9798c91c3064b18039b7a092f9fe851b2128859add1ee22ee93ba086c411961389e14e814787b75fa8bd6576d36347393d0478985f66f068d15c60ea19b18a5ff6497ae37e1856ccb613e6dca9d43f4a329230aa24d549e818ad05d9917d2796d65c0ce06a2511daea0851681da5e59ef60e4e3ef69048eea8c9c35d1ea0ee7b6494a55a0ad4e542ce55c58429eb1879aa3450e6f4824ce0b5406ce02f592d1daac53636bf59", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) [ 2344.746293] FAULT_INJECTION: forcing a failure. [ 2344.746293] name failslab, interval 1, probability 0, space 0, times 0 [ 2344.749182] CPU: 0 PID: 36485 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2344.750915] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2344.752895] Call Trace: [ 2344.753538] dump_stack+0x107/0x167 [ 2344.754432] should_fail.cold+0x5/0xa [ 2344.755288] ? create_object.isra.0+0x3a/0xa20 [ 2344.756353] should_failslab+0x5/0x20 [ 2344.757273] kmem_cache_alloc+0x5b/0x310 [ 2344.758258] ? find_held_lock+0x2c/0x110 [ 2344.759157] create_object.isra.0+0x3a/0xa20 [ 2344.760119] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2344.761403] __kmalloc_node+0x1ae/0x420 [ 2344.762379] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2344.763560] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 2344.764660] kmem_cache_alloc_bulk+0x182/0x320 [ 2344.765784] io_submit_sqes+0x6fe6/0x8610 [ 2344.766869] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2344.768102] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2344.769176] ? find_held_lock+0x2c/0x110 [ 2344.770205] ? io_submit_sqes+0x8610/0x8610 [ 2344.771190] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2344.772288] ? wait_for_completion_io+0x270/0x270 [ 2344.773425] ? rcu_read_lock_any_held+0x75/0xa0 [ 2344.774435] ? vfs_write+0x354/0xb10 [ 2344.775271] ? fput_many+0x2f/0x1a0 [ 2344.776203] ? ksys_write+0x1a9/0x260 [ 2344.777179] ? __ia32_sys_read+0xb0/0xb0 [ 2344.778154] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2344.779350] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2344.780497] do_syscall_64+0x33/0x40 [ 2344.781473] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2344.782706] RIP: 0033:0x7f0bbbb8ab19 [ 2344.783544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2344.787759] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2344.789499] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2344.791219] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2344.793033] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2344.794641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2344.796435] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:37:00 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x800000000000000, 0x0, 0x0) 05:37:00 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r4 = fork() ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:37:00 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:37:17 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:37:17 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:37:17 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) 05:37:17 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x3}, 0x0, 0xb, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r4, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f00000001c0)={0x0, 0x6, 0x40000000000000}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000200)=ANY=[@ANYBLOB="7990d7c6aab11c4fd319cdfa3dd6912affe8000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) pread64(r5, &(0x7f0000000100)=""/52, 0x34, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r6, &(0x7f0000000040)=""/55, 0x37, 0x0) bind$unix(r6, &(0x7f0000000280)=@file={0x0, './file1\x00'}, 0x6e) r7 = fork() ptrace$getregset(0x4204, r7, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:37:17 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78, r3}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r3}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r3}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES64=r4]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r3, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:37:17 executing program 1: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8902, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:37:17 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 60) 05:37:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x0, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) [ 2361.244666] FAULT_INJECTION: forcing a failure. [ 2361.244666] name failslab, interval 1, probability 0, space 0, times 0 [ 2361.246824] CPU: 1 PID: 36835 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2361.248038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2361.249458] Call Trace: [ 2361.249930] dump_stack+0x107/0x167 [ 2361.250563] should_fail.cold+0x5/0xa [ 2361.251224] ? create_object.isra.0+0x3a/0xa20 [ 2361.252031] should_failslab+0x5/0x20 [ 2361.252679] kmem_cache_alloc+0x5b/0x310 [ 2361.253390] ? mark_held_locks+0x9e/0xe0 [ 2361.254103] create_object.isra.0+0x3a/0xa20 [ 2361.254848] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2361.255756] kmem_cache_alloc_bulk+0x168/0x320 [ 2361.256548] io_submit_sqes+0x6fe6/0x8610 [ 2361.257293] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2361.258176] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2361.259035] ? find_held_lock+0x2c/0x110 [ 2361.259761] ? io_submit_sqes+0x8610/0x8610 [ 2361.260525] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2361.261400] ? wait_for_completion_io+0x270/0x270 [ 2361.262244] ? rcu_read_lock_any_held+0x75/0xa0 [ 2361.263060] ? vfs_write+0x354/0xb10 [ 2361.263684] ? fput_many+0x2f/0x1a0 [ 2361.264315] ? ksys_write+0x1a9/0x260 [ 2361.264964] ? __ia32_sys_read+0xb0/0xb0 [ 2361.265681] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2361.266569] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2361.267442] do_syscall_64+0x33/0x40 [ 2361.268098] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2361.268988] RIP: 0033:0x7f0bbbb8ab19 [ 2361.269654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2361.272815] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2361.274111] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2361.275322] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2361.276539] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2361.277765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2361.278990] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:37:17 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000080)={@private1, 0x4000078, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:37:17 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r4 = fork() ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x114, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "3f3b5ff96e74475fda81f08613c826b82a94202f95665041"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x812}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "82a36bf112efb228be489c4a0cd7907ba518378e3936"}}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x565c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ca}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x50}, 0x2000c040) 05:37:17 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3f00000000000000, 0x0, 0x0) 05:37:17 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 61) 05:37:17 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r4}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r4}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r4}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r5]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r4, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) [ 2361.505710] FAULT_INJECTION: forcing a failure. [ 2361.505710] name failslab, interval 1, probability 0, space 0, times 0 [ 2361.507500] CPU: 1 PID: 37042 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2361.508488] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2361.509733] Call Trace: [ 2361.510118] dump_stack+0x107/0x167 [ 2361.510650] should_fail.cold+0x5/0xa [ 2361.511206] ? create_object.isra.0+0x3a/0xa20 [ 2361.511862] should_failslab+0x5/0x20 [ 2361.512421] kmem_cache_alloc+0x5b/0x310 [ 2361.513020] ? mark_held_locks+0x9e/0xe0 [ 2361.513623] create_object.isra.0+0x3a/0xa20 [ 2361.514265] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2361.514999] kmem_cache_alloc_bulk+0x168/0x320 [ 2361.515669] io_submit_sqes+0x6fe6/0x8610 [ 2361.516275] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2361.517009] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2361.517735] ? find_held_lock+0x2c/0x110 [ 2361.518330] ? io_submit_sqes+0x8610/0x8610 [ 2361.518963] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2361.519659] ? wait_for_completion_io+0x270/0x270 [ 2361.520375] ? rcu_read_lock_any_held+0x75/0xa0 [ 2361.521070] ? vfs_write+0x354/0xb10 [ 2361.521623] ? fput_many+0x2f/0x1a0 [ 2361.522155] ? ksys_write+0x1a9/0x260 [ 2361.522704] ? __ia32_sys_read+0xb0/0xb0 [ 2361.523298] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2361.524066] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2361.524842] do_syscall_64+0x33/0x40 [ 2361.525379] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2361.526142] RIP: 0033:0x7f0bbbb8ab19 [ 2361.526687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2361.529354] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2361.530444] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2361.531470] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2361.532502] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2361.533549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2361.534571] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:37:17 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x6fc7, &(0x7f0000000400)={0x0, 0x9450, 0x4, 0x3, 0x1af}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000100), &(0x7f0000000200)) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000280)=""/194, 0xc2}], 0x1) pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000ac0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r1, 0x0, &(0x7f0000000880)={&(0x7f0000000600)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000680)=""/18, 0x12}, {&(0x7f00000006c0)=""/129, 0x81}, {&(0x7f0000000780)=""/137, 0x89}, {&(0x7f0000000940)=""/232, 0xe8}], 0x4, &(0x7f0000000a40)=""/69, 0x45}, 0x0, 0xc2c81964dac0c917, 0x1, {0x3}}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r4 = fork() r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) ioctl$CDROMSTOP(r5, 0x5307) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:37:17 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:37:17 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) creat(&(0x7f0000000000)='./file1\x00', 0x48) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r3 = fork() ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:37:33 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:37:33 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c63616368653d577e2db0e25ef52768653d6e6f6ee894e6"]) r3 = fork() ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:37:33 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r0 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000080)={@local, 0x78, r4}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r4}) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r4}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000280)) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r4, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) getsockname(r0, &(0x7f0000000480)=@hci, &(0x7f0000000180)=0x80) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:37:33 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:37:33 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 62) 05:37:33 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4428000000000000, 0x0, 0x0) 05:37:33 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) (fail_nth: 1) 05:37:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) [ 2377.074261] FAULT_INJECTION: forcing a failure. [ 2377.074261] name failslab, interval 1, probability 0, space 0, times 0 [ 2377.076354] CPU: 1 PID: 37300 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2377.077455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2377.078802] Call Trace: [ 2377.079227] dump_stack+0x107/0x167 [ 2377.079821] should_fail.cold+0x5/0xa [ 2377.080430] ? kvmalloc_node+0x119/0x170 [ 2377.081077] should_failslab+0x5/0x20 [ 2377.081685] __kmalloc_node+0x76/0x420 [ 2377.082314] kvmalloc_node+0x119/0x170 [ 2377.082940] seq_read_iter+0x81c/0x12b0 [ 2377.083592] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2377.084421] ? lock_acquire+0x197/0x470 [ 2377.085055] seq_read+0x3dd/0x5b0 [ 2377.085602] ? seq_read_iter+0x12b0/0x12b0 [ 2377.086294] ? fsnotify_perm.part.0+0x22d/0x620 [ 2377.087039] ? security_file_permission+0xb1/0xe0 [ 2377.087808] ? seq_read_iter+0x12b0/0x12b0 [ 2377.088482] vfs_read+0x228/0x620 [ 2377.089044] __x64_sys_pread64+0x201/0x260 [ 2377.089735] ? ksys_pread64+0x1b0/0x1b0 [ 2377.090368] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2377.091215] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2377.092027] do_syscall_64+0x33/0x40 [ 2377.092617] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2377.093433] RIP: 0033:0x7fd9a5594b19 [ 2377.094039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2377.096945] RSP: 002b:00007fd9a2b0a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2377.097194] FAULT_INJECTION: forcing a failure. [ 2377.097194] name failslab, interval 1, probability 0, space 0, times 0 [ 2377.098153] RAX: ffffffffffffffda RBX: 00007fd9a56a7f60 RCX: 00007fd9a5594b19 [ 2377.098186] RDX: 0000000000000037 RSI: 0000000020000040 RDI: 0000000000000004 [ 2377.098195] RBP: 00007fd9a2b0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2377.098213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2377.105036] R13: 00007fffb30d645f R14: 00007fd9a2b0a300 R15: 0000000000022000 [ 2377.106183] CPU: 0 PID: 37297 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2377.107657] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2377.109406] Call Trace: [ 2377.109985] dump_stack+0x107/0x167 [ 2377.110754] should_fail.cold+0x5/0xa [ 2377.111561] ? create_object.isra.0+0x3a/0xa20 [ 2377.112523] should_failslab+0x5/0x20 [ 2377.113343] kmem_cache_alloc+0x5b/0x310 [ 2377.114217] ? mark_held_locks+0x9e/0xe0 [ 2377.115076] create_object.isra.0+0x3a/0xa20 [ 2377.116002] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2377.117077] kmem_cache_alloc_bulk+0x168/0x320 [ 2377.118047] io_submit_sqes+0x6fe6/0x8610 [ 2377.118957] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2377.120003] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2377.121027] ? find_held_lock+0x2c/0x110 [ 2377.121907] ? io_submit_sqes+0x8610/0x8610 [ 2377.122822] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2377.123850] ? wait_for_completion_io+0x270/0x270 [ 2377.124865] ? rcu_read_lock_any_held+0x75/0xa0 [ 2377.125874] ? vfs_write+0x354/0xb10 [ 2377.126661] ? fput_many+0x2f/0x1a0 [ 2377.127431] ? ksys_write+0x1a9/0x260 [ 2377.128239] ? __ia32_sys_read+0xb0/0xb0 [ 2377.129094] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2377.130204] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2377.131293] do_syscall_64+0x33/0x40 [ 2377.132082] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2377.133154] RIP: 0033:0x7f0bbbb8ab19 [ 2377.133946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2377.137830] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2377.139428] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2377.140926] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2377.142433] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2377.143929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2377.145430] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 [ 2377.202526] 9p: Unknown Cache mode W~-°â^ơ'he=nonè”æ 05:37:33 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) (fail_nth: 2) 05:37:33 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) [ 2377.267319] FAULT_INJECTION: forcing a failure. [ 2377.267319] name failslab, interval 1, probability 0, space 0, times 0 [ 2377.269002] CPU: 1 PID: 37375 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2377.270029] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2377.271307] Call Trace: [ 2377.271691] dump_stack+0x107/0x167 [ 2377.272216] should_fail.cold+0x5/0xa [ 2377.272769] ? create_object.isra.0+0x3a/0xa20 [ 2377.273433] should_failslab+0x5/0x20 [ 2377.274011] kmem_cache_alloc+0x5b/0x310 [ 2377.274621] create_object.isra.0+0x3a/0xa20 [ 2377.275255] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2377.275985] __kmalloc_node+0x1ae/0x420 [ 2377.276576] kvmalloc_node+0x119/0x170 [ 2377.277140] seq_read_iter+0x81c/0x12b0 [ 2377.277718] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2377.278480] ? lock_acquire+0x197/0x470 [ 2377.279053] seq_read+0x3dd/0x5b0 [ 2377.279547] ? seq_read_iter+0x12b0/0x12b0 [ 2377.280180] ? fsnotify_perm.part.0+0x22d/0x620 [ 2377.280860] ? security_file_permission+0xb1/0xe0 [ 2377.281558] ? seq_read_iter+0x12b0/0x12b0 [ 2377.282173] vfs_read+0x228/0x620 [ 2377.282686] __x64_sys_pread64+0x201/0x260 [ 2377.283291] ? ksys_pread64+0x1b0/0x1b0 [ 2377.283869] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2377.284617] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2377.285351] do_syscall_64+0x33/0x40 [ 2377.285903] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2377.286637] RIP: 0033:0x7fd9a5594b19 [ 2377.287176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2377.289808] RSP: 002b:00007fd9a2b0a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2377.290885] RAX: ffffffffffffffda RBX: 00007fd9a56a7f60 RCX: 00007fd9a5594b19 [ 2377.291901] RDX: 0000000000000037 RSI: 0000000020000040 RDI: 0000000000000004 [ 2377.292915] RBP: 00007fd9a2b0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2377.293926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2377.294941] R13: 00007fffb30d645f R14: 00007fd9a2b0a300 R15: 0000000000022000 05:37:33 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4528000000000000, 0x0, 0x0) 05:37:33 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f00000002c0)='mnt/encrypted_dir\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) r7 = accept(r2, &(0x7f0000000240)=@xdp, &(0x7f0000000040)=0x80) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:37:33 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') r3 = fork() ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x1f, 0xf7, 0x1, 0x20, 0x0, 0x0, 0x4080, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_config_ext={0x1000, 0x8000}, 0x40000, 0x0, 0x3, 0x1, 0x6, 0x1000, 0x2, 0x0, 0x6, 0x0, 0x8}, r3, 0x8, 0xffffffffffffffff, 0x2) pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r4 = fork() ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:37:33 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) (fail_nth: 3) 05:37:33 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 63) 05:37:33 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) [ 2377.562651] FAULT_INJECTION: forcing a failure. [ 2377.562651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2377.565190] CPU: 0 PID: 37597 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2377.566670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2377.568402] FAULT_INJECTION: forcing a failure. [ 2377.568402] name failslab, interval 1, probability 0, space 0, times 0 [ 2377.568431] Call Trace: [ 2377.570294] dump_stack+0x107/0x167 [ 2377.571068] should_fail.cold+0x5/0xa [ 2377.571880] _copy_to_iter+0x264/0x12d0 [ 2377.572736] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2377.573787] ? __virt_addr_valid+0x170/0x5d0 [ 2377.574720] ? __check_object_size+0x319/0x440 [ 2377.575693] seq_read_iter+0xdcb/0x12b0 [ 2377.576547] seq_read+0x3dd/0x5b0 [ 2377.577287] ? seq_read_iter+0x12b0/0x12b0 [ 2377.578205] ? fsnotify_perm.part.0+0x22d/0x620 [ 2377.579191] ? security_file_permission+0xb1/0xe0 [ 2377.580213] ? seq_read_iter+0x12b0/0x12b0 [ 2377.581113] vfs_read+0x228/0x620 [ 2377.581860] __x64_sys_pread64+0x201/0x260 [ 2377.582756] ? ksys_pread64+0x1b0/0x1b0 [ 2377.583606] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2377.584722] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2377.585832] do_syscall_64+0x33/0x40 [ 2377.586618] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2377.587707] RIP: 0033:0x7fd9a5594b19 [ 2377.588497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2377.592418] RSP: 002b:00007fd9a2b0a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2377.594038] RAX: ffffffffffffffda RBX: 00007fd9a56a7f60 RCX: 00007fd9a5594b19 [ 2377.595547] RDX: 0000000000000037 RSI: 0000000020000040 RDI: 0000000000000004 [ 2377.597054] RBP: 00007fd9a2b0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2377.598570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2377.600087] R13: 00007fffb30d645f R14: 00007fd9a2b0a300 R15: 0000000000022000 [ 2377.601620] CPU: 1 PID: 37594 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2377.602459] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2377.603399] Call Trace: [ 2377.603711] dump_stack+0x107/0x167 [ 2377.604132] should_fail.cold+0x5/0xa [ 2377.604574] ? create_object.isra.0+0x3a/0xa20 [ 2377.605101] should_failslab+0x5/0x20 [ 2377.605541] kmem_cache_alloc+0x5b/0x310 [ 2377.606014] ? mark_held_locks+0x9e/0xe0 [ 2377.606482] create_object.isra.0+0x3a/0xa20 [ 2377.606983] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2377.607565] kmem_cache_alloc_bulk+0x168/0x320 [ 2377.608094] io_submit_sqes+0x6fe6/0x8610 [ 2377.608584] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2377.609156] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2377.609716] ? find_held_lock+0x2c/0x110 [ 2377.610190] ? io_submit_sqes+0x8610/0x8610 [ 2377.610683] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2377.611232] ? wait_for_completion_io+0x270/0x270 [ 2377.611787] ? rcu_read_lock_any_held+0x75/0xa0 [ 2377.612319] ? vfs_write+0x354/0xb10 [ 2377.612754] ? fput_many+0x2f/0x1a0 [ 2377.613171] ? ksys_write+0x1a9/0x260 [ 2377.613606] ? __ia32_sys_read+0xb0/0xb0 [ 2377.614085] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2377.614684] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2377.615275] do_syscall_64+0x33/0x40 [ 2377.615701] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2377.616288] RIP: 0033:0x7f0bbbb8ab19 [ 2377.616716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2377.618808] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2377.619675] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2377.620488] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2377.621306] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2377.622130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2377.622945] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:37:49 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) (fail_nth: 4) 05:37:49 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="050000010001000000000000000000008fc1a0e0346da2657ed2c03759bf94775ac815db0895a7b3a29bc5b6d9b1512854781a56d470290a6f69cf7d9a16f5e3b1b7401e21e5f9fbc6ec32782d5be943931f17ed217b88bd0400000000000000d724079420873cc6a874f123a3e25c9aceaac29cbcbe86cbbc8c9798c91c3064b18039b7a092f9fe851b2128859add1ee22ee93ba086c411961389e14e814787b75fa8bd6576d36347393d0478985f66f068d15c60ea19b18a5ff6497ae37e1856ccb613e6dca9d43f4a329230aa24d549e818ad05d9917d2796d65c0ce06a2511daea0851681da5e59ef60e4e3ef69048eea8c9c35d1ea0ee7b6494a55a0ad4e542ce55c58429eb1879aa3450e6f4824ce0b5406ce02f592d1daac53636bf59", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:37:49 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4628000000000000, 0x0, 0x0) 05:37:49 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x2}, 0x5) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r4, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r5 = fork() clock_gettime(0x0, &(0x7f0000000c40)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000600)=""/207, 0xcf}, {&(0x7f0000000500)=""/57, 0x39}], 0x2, &(0x7f0000000580)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000700), 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000780)=""/39, 0x27}, {&(0x7f00000007c0)=""/26, 0x1a}, {&(0x7f0000000800)=""/94, 0x5e}, {&(0x7f0000000940)=""/176, 0xb0}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000880)=""/11, 0xb}, {&(0x7f0000000ac0)=""/53, 0x35}], 0x7, &(0x7f0000000b80)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x40}}], 0x2, 0x0, &(0x7f0000000c80)={r6, r7+10000000}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file1\x00'}) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x40, 0x9, 0x20, 0x6, 0x0, 0x3ff, 0x8000, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6bd942d3, 0x1, @perf_bp={&(0x7f0000000300), 0x18}, 0x8400, 0x8, 0x2, 0x8, 0x100000001, 0x3, 0xc56, 0x0, 0x0, 0x0, 0x3}, r8, 0xf, r9, 0xa) r10 = syz_open_dev$vcsu(&(0x7f0000000100), 0x4, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r10, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x28, 0x1, 0x9, 0xa07, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xffff}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) [ 2393.125981] FAULT_INJECTION: forcing a failure. 05:37:49 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:37:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:37:49 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 64) 05:37:49 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c63616368653d577e2db0e25ef52768653d6e6f6ee894e6"]) r3 = fork() ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) [ 2393.125981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2393.128329] CPU: 1 PID: 37757 Comm: syz-executor.1 Not tainted 5.10.239 #1 [ 2393.129490] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2393.130909] Call Trace: [ 2393.131357] dump_stack+0x107/0x167 [ 2393.131958] should_fail.cold+0x5/0xa [ 2393.132605] _copy_to_user+0x2e/0x180 [ 2393.133241] simple_read_from_buffer+0xcc/0x160 [ 2393.134026] proc_fail_nth_read+0x198/0x230 [ 2393.134749] ? proc_sessionid_read+0x230/0x230 [ 2393.135502] ? security_file_permission+0xb1/0xe0 [ 2393.136316] ? proc_sessionid_read+0x230/0x230 [ 2393.137080] vfs_read+0x228/0x620 [ 2393.137659] ksys_read+0x12d/0x260 [ 2393.138268] ? vfs_write+0xb10/0xb10 [ 2393.138892] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2393.139762] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2393.140613] do_syscall_64+0x33/0x40 [ 2393.141237] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2393.142092] RIP: 0033:0x7fd9a554769c [ 2393.142704] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2393.145734] RSP: 002b:00007fd9a2b0a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2393.147004] RAX: ffffffffffffffda RBX: 0000000000000028 RCX: 00007fd9a554769c [ 2393.148186] RDX: 000000000000000f RSI: 00007fd9a2b0a1e0 RDI: 0000000000000005 [ 2393.149371] RBP: 00007fd9a2b0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2393.150557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2393.151766] R13: 00007fffb30d645f R14: 00007fd9a2b0a300 R15: 0000000000022000 [ 2393.191801] FAULT_INJECTION: forcing a failure. [ 2393.191801] name failslab, interval 1, probability 0, space 0, times 0 [ 2393.193218] CPU: 0 PID: 37759 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2393.194033] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2393.195006] Call Trace: [ 2393.195321] dump_stack+0x107/0x167 [ 2393.195749] should_fail.cold+0x5/0xa [ 2393.196199] ? create_object.isra.0+0x3a/0xa20 [ 2393.196734] should_failslab+0x5/0x20 [ 2393.197182] kmem_cache_alloc+0x5b/0x310 [ 2393.197655] ? find_held_lock+0x2c/0x110 [ 2393.198142] create_object.isra.0+0x3a/0xa20 [ 2393.198655] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2393.199247] __kmalloc_node+0x1ae/0x420 [ 2393.199714] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2393.200309] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 2393.200895] kmem_cache_alloc_bulk+0x182/0x320 [ 2393.201431] io_submit_sqes+0x6fe6/0x8610 [ 2393.201937] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2393.202526] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2393.203096] ? find_held_lock+0x2c/0x110 [ 2393.203573] ? io_submit_sqes+0x8610/0x8610 [ 2393.204081] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2393.204647] ? wait_for_completion_io+0x270/0x270 [ 2393.205212] ? rcu_read_lock_any_held+0x75/0xa0 [ 2393.205754] ? vfs_write+0x354/0xb10 [ 2393.206198] ? fput_many+0x2f/0x1a0 [ 2393.206623] ? ksys_write+0x1a9/0x260 [ 2393.207069] ? __ia32_sys_read+0xb0/0xb0 [ 2393.207548] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2393.208163] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2393.208771] do_syscall_64+0x33/0x40 [ 2393.209209] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2393.209808] RIP: 0033:0x7f0bbbb8ab19 [ 2393.210258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2393.212415] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2393.213307] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2393.214164] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2393.215010] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2393.215862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2393.216715] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:37:49 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xf0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:37:49 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) 05:37:49 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x7fff, 0x0, 0x0, 0x800800, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@remote, 0x7}) 05:37:49 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4728000000000000, 0x0, 0x0) [ 2393.330374] 9p: Unknown Cache mode W~-°â^ơ'he=nonè”æ 05:37:49 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 05:37:49 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x28, 0x0) 05:37:49 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open_tree(r0, &(0x7f0000000100)='./file1\x00', 0x8100) syz_io_uring_setup(0x10b8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000000)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r4, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r5 = fork() ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) [ 2393.418242] FAULT_INJECTION: forcing a failure. [ 2393.418242] name failslab, interval 1, probability 0, space 0, times 0 [ 2393.420266] CPU: 1 PID: 38044 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2393.421375] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2393.422724] Call Trace: [ 2393.423151] dump_stack+0x107/0x167 [ 2393.423741] should_fail.cold+0x5/0xa [ 2393.424371] should_failslab+0x5/0x20 [ 2393.424999] kmem_cache_alloc_bulk+0x4b/0x320 [ 2393.425726] io_submit_sqes+0x6fe6/0x8610 [ 2393.426386] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2393.427186] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2393.427977] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2393.428749] ? find_held_lock+0x2c/0x110 [ 2393.429397] ? io_submit_sqes+0x8610/0x8610 [ 2393.430110] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2393.430871] ? wait_for_completion_io+0x270/0x270 [ 2393.431650] ? rcu_read_lock_any_held+0x75/0xa0 [ 2393.432415] ? vfs_write+0x354/0xb10 [ 2393.433000] ? fput_many+0x2f/0x1a0 [ 2393.433588] ? ksys_write+0x1a9/0x260 [ 2393.434200] ? __ia32_sys_read+0xb0/0xb0 [ 2393.434843] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2393.435695] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2393.436526] do_syscall_64+0x33/0x40 [ 2393.437134] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2393.437963] RIP: 0033:0x7f0c174efb19 [ 2393.438561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2393.441527] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2393.442746] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2393.443859] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2393.444982] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2393.446130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2393.447261] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 05:37:49 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xe4ffffff00000000, 0x0, 0x0) 05:37:49 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="050000010001000000000000000000008fc1a0e0346da2657ed2c03759bf94775ac815db0895a7b3a29bc5b6d9b1512854781a56d470290a6f69cf7d9a16f5e3b1b7401e21e5f9fbc6ec32782d5be943931f17ed217b88bd0400000000000000d724079420873cc6a874f123a3e25c9aceaac29cbcbe86cbbc8c9798c91c3064b18039b7a092f9fe851b2128859add1ee22ee93ba086c411961389e14e814787b75fa8bd6576d36347393d0478985f66f068d15c60ea19b18a5ff6497ae37e1856ccb613e6dca9d43f4a329230aa24d549e818ad05d9917d2796d65c0ce06a2511daea0851681da5e59ef60e4e3ef69048eea8c9c35d1ea0ee7b6494a55a0ad4e542ce55c58429eb1879aa3450e6f4824ce0b5406ce02f592d1daac53636bf59", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:38:06 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x20000077, 0x0) 05:38:06 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xea4f000000000000, 0x0, 0x0) 05:38:06 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 65) 05:38:06 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:38:06 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:38:06 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:38:06 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 05:38:06 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x5b62, &(0x7f00000001c0)={0x0, 0x50b7, 0x20, 0x0, 0x1a, 0x0, r0}) open_by_handle_at(r1, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x1000, 0x1, 0x8, 0x5f2}}, 0x480) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r4, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dbf17d2b64250a67e843fcae14a8ce960e26a66c6d9c1d2813ce5f851c021d3bf896de080e435a7c2b24a7f0ac80593667b9ec383b422de29aa213849cc3cb25f36959e004d5d634edef3baf4bb3896e3499361571ec6ced10a63dab30cceb6a78307d703703fa540b7e664facee664deaa24fd76cf38ac23c32e808b", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,cache=none,\x00']) r5 = fork() ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) [ 2410.204602] FAULT_INJECTION: forcing a failure. [ 2410.204602] name failslab, interval 1, probability 0, space 0, times 0 [ 2410.207284] CPU: 1 PID: 38339 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2410.208755] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2410.210525] Call Trace: [ 2410.211092] dump_stack+0x107/0x167 [ 2410.211885] should_fail.cold+0x5/0xa [ 2410.212695] ? create_object.isra.0+0x3a/0xa20 [ 2410.213666] should_failslab+0x5/0x20 [ 2410.214479] kmem_cache_alloc+0x5b/0x310 [ 2410.215351] create_object.isra.0+0x3a/0xa20 [ 2410.216283] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2410.217369] kmem_cache_alloc_bulk+0x168/0x320 [ 2410.218357] io_submit_sqes+0x6fe6/0x8610 [ 2410.219245] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2410.220286] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2410.221343] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2410.222376] ? find_held_lock+0x2c/0x110 [ 2410.222854] FAULT_INJECTION: forcing a failure. [ 2410.222854] name failslab, interval 1, probability 0, space 0, times 0 [ 2410.223242] ? io_submit_sqes+0x8610/0x8610 [ 2410.223271] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2410.223291] ? wait_for_completion_io+0x270/0x270 [ 2410.223313] ? rcu_read_lock_any_held+0x75/0xa0 [ 2410.223329] ? vfs_write+0x354/0xb10 [ 2410.223348] ? fput_many+0x2f/0x1a0 [ 2410.223367] ? ksys_write+0x1a9/0x260 [ 2410.223386] ? __ia32_sys_read+0xb0/0xb0 [ 2410.223409] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2410.223428] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2410.223449] do_syscall_64+0x33/0x40 [ 2410.223467] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2410.223489] RIP: 0033:0x7f0c174efb19 [ 2410.237619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2410.241528] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2410.243150] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2410.244676] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2410.246201] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2410.247718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2410.249230] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 [ 2410.250795] CPU: 0 PID: 38340 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2410.252287] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2410.254027] Call Trace: [ 2410.254605] dump_stack+0x107/0x167 [ 2410.255389] should_fail.cold+0x5/0xa [ 2410.256197] ? create_object.isra.0+0x3a/0xa20 [ 2410.257177] should_failslab+0x5/0x20 [ 2410.257994] kmem_cache_alloc+0x5b/0x310 [ 2410.258866] ? mark_held_locks+0x9e/0xe0 [ 2410.259731] create_object.isra.0+0x3a/0xa20 [ 2410.260654] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2410.261732] kmem_cache_alloc_bulk+0x168/0x320 [ 2410.262714] io_submit_sqes+0x6fe6/0x8610 [ 2410.263613] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2410.264666] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2410.265677] ? find_held_lock+0x2c/0x110 [ 2410.266551] ? io_submit_sqes+0x8610/0x8610 [ 2410.267477] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2410.268501] ? wait_for_completion_io+0x270/0x270 [ 2410.269530] ? rcu_read_lock_any_held+0x75/0xa0 [ 2410.270519] ? vfs_write+0x354/0xb10 [ 2410.271310] ? fput_many+0x2f/0x1a0 [ 2410.272082] ? ksys_write+0x1a9/0x260 [ 2410.272893] ? __ia32_sys_read+0xb0/0xb0 [ 2410.273762] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2410.274896] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2410.275989] do_syscall_64+0x33/0x40 [ 2410.276777] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2410.277862] RIP: 0033:0x7f0bbbb8ab19 [ 2410.278668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2410.282573] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2410.284188] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2410.285698] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2410.287223] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2410.288728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2410.290249] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:38:06 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x2) 05:38:06 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r0 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000080)={@local, 0x78, r4}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r4}) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r4}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000040)=ANY=[]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r4, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:38:06 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x847d, 0x0, 0x2, 0x269}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x0, @fd_index, 0x8, 0x9, 0x954, 0x0, 0x1, {0x1, r5}}, 0x80) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000100)={0x77359400}}, 0xffffffff) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r6, r2}}, 0x8) pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="74722df13b24070000000000000000006e6f1d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=none,\x00']) r7 = fork() ptrace$getregset(0x4204, r7, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:38:06 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x3) 05:38:06 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xec4f000000000000, 0x0, 0x0) 05:38:06 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 05:38:06 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000280)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) [ 2410.623747] FAULT_INJECTION: forcing a failure. [ 2410.623747] name failslab, interval 1, probability 0, space 0, times 0 [ 2410.626380] CPU: 1 PID: 38580 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2410.627849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2410.629609] Call Trace: [ 2410.630182] dump_stack+0x107/0x167 [ 2410.630953] should_fail.cold+0x5/0xa [ 2410.631760] ? create_object.isra.0+0x3a/0xa20 [ 2410.632728] should_failslab+0x5/0x20 [ 2410.633534] kmem_cache_alloc+0x5b/0x310 [ 2410.634406] ? mark_held_locks+0x9e/0xe0 [ 2410.635278] create_object.isra.0+0x3a/0xa20 [ 2410.636208] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2410.637289] kmem_cache_alloc_bulk+0x168/0x320 [ 2410.638283] io_submit_sqes+0x6fe6/0x8610 [ 2410.639167] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2410.640222] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2410.641275] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2410.642307] ? find_held_lock+0x2c/0x110 [ 2410.643165] ? io_submit_sqes+0x8610/0x8610 [ 2410.644084] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2410.645106] ? wait_for_completion_io+0x270/0x270 [ 2410.646137] ? rcu_read_lock_any_held+0x75/0xa0 [ 2410.647118] ? vfs_write+0x354/0xb10 [ 2410.647905] ? fput_many+0x2f/0x1a0 [ 2410.648673] ? ksys_write+0x1a9/0x260 [ 2410.649484] ? __ia32_sys_read+0xb0/0xb0 [ 2410.650357] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2410.651476] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2410.652569] do_syscall_64+0x33/0x40 [ 2410.653355] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2410.654451] RIP: 0033:0x7f0c174efb19 [ 2410.655238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2410.659139] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2410.660751] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2410.662266] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2410.663741] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2410.665256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2410.666780] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 05:38:06 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x4) 05:38:06 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x20, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x3, 0xa}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:38:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:38:22 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xed4f000000000000, 0x0, 0x0) 05:38:22 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:38:22 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:38:22 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x5) 05:38:22 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 66) 05:38:22 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 05:38:22 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7781a637f53d", @ANYRESHEX=r1, @ANYBLOB="bf490e6368453d6d6d61702c6361630ac3481be66e652c00"]) r3 = fork() ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) [ 2426.266477] FAULT_INJECTION: forcing a failure. [ 2426.266477] name failslab, interval 1, probability 0, space 0, times 0 [ 2426.269280] CPU: 1 PID: 38811 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2426.270729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2426.272447] Call Trace: [ 2426.273000] dump_stack+0x107/0x167 [ 2426.273782] should_fail.cold+0x5/0xa [ 2426.274587] ? create_object.isra.0+0x3a/0xa20 [ 2426.275528] should_failslab+0x5/0x20 [ 2426.276311] kmem_cache_alloc+0x5b/0x310 [ 2426.277157] ? mark_held_locks+0x9e/0xe0 [ 2426.278007] create_object.isra.0+0x3a/0xa20 [ 2426.278917] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2426.279972] kmem_cache_alloc_bulk+0x168/0x320 [ 2426.280942] io_submit_sqes+0x6fe6/0x8610 [ 2426.281783] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2426.282810] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2426.283829] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2426.284828] ? find_held_lock+0x2c/0x110 [ 2426.285661] ? io_submit_sqes+0x8610/0x8610 [ 2426.286552] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2426.287539] ? wait_for_completion_io+0x270/0x270 [ 2426.288552] ? rcu_read_lock_any_held+0x75/0xa0 [ 2426.289520] ? vfs_write+0x354/0xb10 [ 2426.290291] ? fput_many+0x2f/0x1a0 [ 2426.291048] ? ksys_write+0x1a9/0x260 [ 2426.291833] ? __ia32_sys_read+0xb0/0xb0 [ 2426.292662] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2426.293767] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2426.294859] do_syscall_64+0x33/0x40 [ 2426.295639] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2426.296664] FAULT_INJECTION: forcing a failure. [ 2426.296664] name failslab, interval 1, probability 0, space 0, times 0 [ 2426.298919] RIP: 0033:0x7f0c174efb19 [ 2426.299694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2426.303507] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2426.305089] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2426.306554] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2426.308048] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2426.309533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2426.311025] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 [ 2426.312855] CPU: 0 PID: 38816 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2426.314411] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2426.316153] Call Trace: [ 2426.316723] dump_stack+0x107/0x167 [ 2426.317499] should_fail.cold+0x5/0xa [ 2426.318334] ? create_object.isra.0+0x3a/0xa20 [ 2426.319332] should_failslab+0x5/0x20 [ 2426.320131] kmem_cache_alloc+0x5b/0x310 [ 2426.320989] ? mark_held_locks+0x9e/0xe0 [ 2426.321848] create_object.isra.0+0x3a/0xa20 [ 2426.322791] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2426.323907] kmem_cache_alloc_bulk+0x168/0x320 [ 2426.324888] io_submit_sqes+0x6fe6/0x8610 [ 2426.325786] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2426.326860] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2426.327887] ? find_held_lock+0x2c/0x110 [ 2426.328750] ? io_submit_sqes+0x8610/0x8610 [ 2426.329678] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2426.330725] ? wait_for_completion_io+0x270/0x270 [ 2426.331776] ? rcu_read_lock_any_held+0x75/0xa0 [ 2426.332762] ? vfs_write+0x354/0xb10 [ 2426.333553] ? fput_many+0x2f/0x1a0 [ 2426.334338] ? ksys_write+0x1a9/0x260 [ 2426.335146] ? __ia32_sys_read+0xb0/0xb0 [ 2426.336023] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2426.337155] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2426.338260] do_syscall_64+0x33/0x40 [ 2426.339043] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2426.340109] RIP: 0033:0x7f0bbbb8ab19 [ 2426.340900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2426.345056] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2426.347051] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2426.348985] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2426.350924] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2426.352501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2426.354043] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:38:22 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x6) 05:38:22 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2008f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = dup(0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000080)={@local, 0x78, r4}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd, 0xfff, 0x0, 0x2a, 0x1, 0x1}, 0x7) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r4}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r4}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000480)) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000680)=ANY=[@ANYBLOB="050800010001000000000000000000008fc1a0e0346da2657ed2c03759bf94775ac815db0895a7b3a29bc5b6d9b1512854781a56d470290a6f69cf7d9a16f5e3b1b7401e21e5f9fbc6ec32782d5be943931f17ed217b88bd0400000000000000d724079420873cc6a874f123a3e25c9aceaac29cbcbe86cbbc8c9798c91c3064b18039b7a092f9fe851b2128859add1ee22ee93ba086c411961389e14e814787b75fa8bd6576d36347393d0478985f66f068d15c60ea19b18a5ff6497ae37e1856ccb613e601a9d43f4a329230aa24d549e818ad05d9917d2796d65c0ce06a2511daea0851681da5e59ef60e4e3ef6904842ce55c58429eb1879aa3450e6f4824ce0b5406ce02f592ddc0905749bd0381daac53636bf599a486b4719af41749871f78848c6100b3e4f4bfd18cb7149c41785f492efe6eda5e555099540de39cb2517fd2bc7f70b04ef44f93ad7afd291da84c787", @ANYRESDEC, @ANYRES64=r5]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r4, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:38:22 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) pwritev(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)="44f6c89a75c7163be0b0205b8db416aee5a85ca600044eca4699468322a2095dc4dd7d2bf26ad8a0e1feae401d4d01c41d18a0ddd72e2ad046208c244181ef8fd750ee193714d640a5a338e4ad114b064023d08dd581a1d62ba27276ea8c64736be128", 0x63}, {&(0x7f0000000000)="ed09c416e5bb44c2624c2e8748ec5036a4658637f11eb706e6d3c445ef42c945456ff0a5ca1f", 0x26}, {&(0x7f0000000280)="010b6866f20fe236e0d534b50b266b1c1c965d575d66cf66711a334e4ce1847fe7de56d45fbe1ce4a42468c783a4dd4f61d6b955a03b5d07c611f09382ed0f5fd56e8e0d44e5f59a6bf04e28592c7ef55b78de3ee11dfe762e05bd47108aa91bd61950b6f46968c29e104faba999704f10761876a231ac9e4d07222877ef1354fbd7b752c15ae6827caceb2514d9021f2b2bbb5bd4e4945df57fcda14de724fb66a4cb1fcc0f56ea6e04531393d135b451e0874a6458fa57ae18622fa1d1d6244fe0bdd320955f8a", 0xc8}, {&(0x7f0000000100)="3c400f514d2e8a5747b7ebf04d9d443decd3ed66fcd1e8c2bc404d4991c2e665797a46", 0x23}], 0x4, 0x80000, 0x9) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r3 = fork() ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:38:22 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x7) 05:38:22 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xee4f000000000000, 0x0, 0x0) 05:38:22 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) [ 2426.719403] FAULT_INJECTION: forcing a failure. [ 2426.719403] name failslab, interval 1, probability 0, space 0, times 0 [ 2426.723299] CPU: 1 PID: 39101 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2426.724765] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2426.726512] Call Trace: [ 2426.727083] dump_stack+0x107/0x167 [ 2426.727854] should_fail.cold+0x5/0xa [ 2426.728665] ? create_object.isra.0+0x3a/0xa20 [ 2426.729638] should_failslab+0x5/0x20 [ 2426.730454] kmem_cache_alloc+0x5b/0x310 [ 2426.731304] ? mark_held_locks+0x9e/0xe0 [ 2426.732152] create_object.isra.0+0x3a/0xa20 [ 2426.733090] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2426.734154] kmem_cache_alloc_bulk+0x168/0x320 [ 2426.735146] io_submit_sqes+0x6fe6/0x8610 [ 2426.736036] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2426.737076] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2426.738115] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2426.739160] ? find_held_lock+0x2c/0x110 [ 2426.740035] ? io_submit_sqes+0x8610/0x8610 [ 2426.740943] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2426.741966] ? wait_for_completion_io+0x270/0x270 [ 2426.743008] ? rcu_read_lock_any_held+0x75/0xa0 [ 2426.743993] ? vfs_write+0x354/0xb10 [ 2426.744787] ? fput_many+0x2f/0x1a0 [ 2426.745558] ? ksys_write+0x1a9/0x260 [ 2426.746378] ? __ia32_sys_read+0xb0/0xb0 [ 2426.747240] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2426.748369] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2426.749457] do_syscall_64+0x33/0x40 [ 2426.750247] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2426.751347] RIP: 0033:0x7f0c174efb19 [ 2426.752143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2426.756055] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2426.757670] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2426.759190] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2426.760684] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2426.762203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2426.763714] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 [ 2441.883761] FAULT_INJECTION: forcing a failure. [ 2441.883761] name failslab, interval 1, probability 0, space 0, times 0 [ 2441.885415] CPU: 1 PID: 39275 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2441.886247] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2441.887266] Call Trace: [ 2441.887590] dump_stack+0x107/0x167 [ 2441.888029] should_fail.cold+0x5/0xa [ 2441.888738] ? create_object.isra.0+0x3a/0xa20 [ 2441.889330] should_failslab+0x5/0x20 [ 2441.889967] kmem_cache_alloc+0x5b/0x310 [ 2441.890459] ? mark_held_locks+0x9e/0xe0 [ 2441.890960] create_object.isra.0+0x3a/0xa20 [ 2441.891489] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2441.892104] kmem_cache_alloc_bulk+0x168/0x320 [ 2441.892662] io_submit_sqes+0x6fe6/0x8610 [ 2441.893182] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2441.893782] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2441.894386] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2441.894978] ? find_held_lock+0x2c/0x110 [ 2441.895471] ? io_submit_sqes+0x8610/0x8610 [ 2441.895993] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2441.896574] ? wait_for_completion_io+0x270/0x270 [ 2441.897157] ? rcu_read_lock_any_held+0x75/0xa0 [ 2441.897715] ? vfs_write+0x354/0xb10 [ 2441.898167] ? fput_many+0x2f/0x1a0 [ 2441.898613] ? ksys_write+0x1a9/0x260 [ 2441.899074] ? __ia32_sys_read+0xb0/0xb0 [ 2441.899578] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2441.900220] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2441.900843] do_syscall_64+0x33/0x40 05:38:37 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:38:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:38:37 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x8) 05:38:37 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:38:37 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xffffff7f00000000, 0x0, 0x0) 05:38:37 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x7, 0x8001, 0x7fffffff}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r4, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r5 = fork() ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:38:37 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 05:38:37 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 67) [ 2441.901299] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2441.902065] RIP: 0033:0x7f0c174efb19 [ 2441.902554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2441.904780] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2441.905707] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2441.906580] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2441.907430] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2441.908284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2441.909149] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 [ 2441.952491] FAULT_INJECTION: forcing a failure. [ 2441.952491] name failslab, interval 1, probability 0, space 0, times 0 [ 2441.955141] CPU: 0 PID: 39284 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2441.956602] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2441.958335] Call Trace: [ 2441.958894] dump_stack+0x107/0x167 [ 2441.959665] should_fail.cold+0x5/0xa [ 2441.960468] ? create_object.isra.0+0x3a/0xa20 [ 2441.961455] should_failslab+0x5/0x20 [ 2441.962264] kmem_cache_alloc+0x5b/0x310 [ 2441.963146] ? find_held_lock+0x2c/0x110 [ 2441.964016] create_object.isra.0+0x3a/0xa20 [ 2441.965128] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2441.966227] __kmalloc_node+0x1ae/0x420 [ 2441.967137] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2441.968204] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 2441.969262] kmem_cache_alloc_bulk+0x182/0x320 [ 2441.970239] io_submit_sqes+0x6fe6/0x8610 [ 2441.971148] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2441.972194] __do_sys_io_uring_enter+0x6b2/0x1890 05:38:37 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0xa) 05:38:37 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="050000010001000000000000000000008fc1a0e0346da2657ed2c03759bf94775ac815db0895a7b3a29bc5b6d9b1512854781a56d470290a6f69cf7d9a16f5e3b1b7401e21e5f9fbc6ec32782d5be943931f17ad217b88bd0400000000000000d724079420873cc6a874f123a3e25c9aceaac29cbcbe86cbbc8c9798c91c3064b18039b7a09233dbd2654b1276aedd1ee22ee93ba086c411961389e14e814787b75fa8bd6576d36347393d0478985f66f068d15c60ea19b18a5ff6497ae37e1856ccb613e6dca9d43f4a329230aa24d549e818ad05d9917d2796d65c0ce06a2511daea0851681da5e59ef60e4e3ef69048eea8c9c35d1ea0ee7b6494a55a0ad4e542ce55c58429eb1879aa3450e6f4824ce0b5406ce02f592d1daac53636bf59", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:38:37 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x10) [ 2441.973199] ? find_held_lock+0x2c/0x110 [ 2441.974261] ? io_submit_sqes+0x8610/0x8610 [ 2441.975179] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2441.976192] ? wait_for_completion_io+0x270/0x270 [ 2441.977204] ? rcu_read_lock_any_held+0x75/0xa0 [ 2441.978176] ? vfs_write+0x354/0xb10 [ 2441.978970] ? fput_many+0x2f/0x1a0 [ 2441.979734] ? ksys_write+0x1a9/0x260 [ 2441.980538] ? __ia32_sys_read+0xb0/0xb0 [ 2441.981402] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2441.982513] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2441.983610] do_syscall_64+0x33/0x40 [ 2441.984390] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2441.985463] RIP: 0033:0x7f0bbbb8ab19 [ 2441.986243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2441.990136] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2441.991752] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2441.993229] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2441.994738] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2441.996236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2441.997722] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:38:38 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x20000078, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@private0, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:38:38 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x48) 05:38:38 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 05:38:38 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0) 05:38:38 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x4c) 05:38:38 executing program 6: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000180)={@rand_addr=' \x01\x00', 0x33}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000080)={@local, 0x78, r4}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r4}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1, @ANYRES64=r5]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r4, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) [ 2442.177604] FAULT_INJECTION: forcing a failure. [ 2442.177604] name failslab, interval 1, probability 0, space 0, times 0 [ 2442.179072] CPU: 1 PID: 39517 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2442.179859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2442.180790] Call Trace: [ 2442.181100] dump_stack+0x107/0x167 [ 2442.181515] should_fail.cold+0x5/0xa [ 2442.181948] ? create_object.isra.0+0x3a/0xa20 [ 2442.182468] should_failslab+0x5/0x20 [ 2442.182902] kmem_cache_alloc+0x5b/0x310 [ 2442.183368] ? mark_held_locks+0x9e/0xe0 [ 2442.183830] create_object.isra.0+0x3a/0xa20 [ 2442.184333] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2442.184912] kmem_cache_alloc_bulk+0x168/0x320 [ 2442.185441] io_submit_sqes+0x6fe6/0x8610 [ 2442.185918] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2442.186477] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2442.187051] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2442.187604] ? find_held_lock+0x2c/0x110 [ 2442.188068] ? io_submit_sqes+0x8610/0x8610 [ 2442.188561] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2442.189108] ? wait_for_completion_io+0x270/0x270 [ 2442.189657] ? rcu_read_lock_any_held+0x75/0xa0 [ 2442.190189] ? vfs_write+0x354/0xb10 [ 2442.190617] ? fput_many+0x2f/0x1a0 [ 2442.191037] ? ksys_write+0x1a9/0x260 [ 2442.191477] ? __ia32_sys_read+0xb0/0xb0 [ 2442.191945] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2442.192544] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2442.193130] do_syscall_64+0x33/0x40 [ 2442.193561] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2442.194149] RIP: 0033:0x7f0c174efb19 [ 2442.194585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2442.196664] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2442.197537] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2442.198351] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2442.199175] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2442.199993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2442.200814] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 05:38:38 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x68) 05:38:51 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x6c) 05:38:51 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 05:38:51 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 68) 05:38:51 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x204001, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="050000010001000000000000f5ff00008fc1a0e0346da2657ed2c03759bf94775ac815db0895a7b3a29bc5b6d9b1512854781a56d47029e36f69cf7d9a16f5e3b1b7401e21e5f9fbc6ec32782d5be943931ff8ed217b88bd0400000000000000d724079420873cc6a874f123a3e25c9aceaac29cbcbe86cbbc8c9798c91c3064b18039b7a092f9fe851b2128859add1ee22ee93ba086c411961389e14e814787b75fa8bd6576d36347393d0478985f66f068497ae37e1856ccb613e6dc49e818ad05d9917d2796d65c0ce06a2511daea085168656ab009f0f0efd9f69048eea8c9c35d1ea0ee7b6494a55a0ad4e542ce55c58429eb1879aa3450e6f4824ce0b5406ce02f592d1daac53636bf5900"/288, @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x80000000, 0x1, 0x7, 0x100000000}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:38:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:38:51 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:38:51 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2) 05:38:51 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0xfe, 0x5, 0x7, 0x80, 0x0, 0x3750, 0x28, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3}, 0x80100, 0x9, 0x88, 0x7, 0x100000000, 0x3f, 0x2, 0x0, 0xffffffe1, 0x0, 0x6}, 0x0, 0x7, r1, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r4, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='w(ans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,cache=none,\x00']) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x301, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file1\x00'}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r7, 0x0) getresgid(&(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {r7, r8}}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0xfffffffffffffffe, &(0x7f0000000000)='./file1\x00', r5) r9 = fork() ptrace$getregset(0x4204, r9, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) [ 2455.977424] FAULT_INJECTION: forcing a failure. [ 2455.977424] name failslab, interval 1, probability 0, space 0, times 0 [ 2455.980862] CPU: 0 PID: 39641 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2455.982623] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2455.984774] Call Trace: [ 2455.985457] dump_stack+0x107/0x167 [ 2455.986406] should_fail.cold+0x5/0xa [ 2455.987397] ? create_object.isra.0+0x3a/0xa20 [ 2455.988574] should_failslab+0x5/0x20 [ 2455.989553] kmem_cache_alloc+0x5b/0x310 [ 2455.990604] ? mark_held_locks+0x9e/0xe0 [ 2455.991672] create_object.isra.0+0x3a/0xa20 [ 2455.992788] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2455.994106] kmem_cache_alloc_bulk+0x168/0x320 [ 2455.995303] io_submit_sqes+0x6fe6/0x8610 [ 2455.996393] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2455.997674] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2455.998978] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2456.000219] ? find_held_lock+0x2c/0x110 [ 2456.001279] ? io_submit_sqes+0x8610/0x8610 [ 2456.002409] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2456.003686] ? wait_for_completion_io+0x270/0x270 [ 2456.004942] ? rcu_read_lock_any_held+0x75/0xa0 [ 2456.006147] ? vfs_write+0x354/0xb10 [ 2456.007141] ? fput_many+0x2f/0x1a0 [ 2456.008091] ? ksys_write+0x1a9/0x260 [ 2456.009076] ? __ia32_sys_read+0xb0/0xb0 [ 2456.010138] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2456.011377] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2456.012448] do_syscall_64+0x33/0x40 [ 2456.013225] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2456.014273] RIP: 0033:0x7f0c174efb19 [ 2456.015067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2456.018858] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2456.020414] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2456.021876] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2456.023362] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2456.024810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2456.026264] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 05:38:52 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) [ 2456.049604] FAULT_INJECTION: forcing a failure. [ 2456.049604] name failslab, interval 1, probability 0, space 0, times 0 [ 2456.052247] CPU: 0 PID: 39655 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2456.053707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2456.055466] Call Trace: [ 2456.056019] dump_stack+0x107/0x167 [ 2456.056787] should_fail.cold+0x5/0xa [ 2456.057584] ? create_object.isra.0+0x3a/0xa20 [ 2456.058649] should_failslab+0x5/0x20 [ 2456.059570] kmem_cache_alloc+0x5b/0x310 [ 2456.060527] create_object.isra.0+0x3a/0xa20 [ 2456.061447] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2456.062625] kmem_cache_alloc_bulk+0x168/0x320 [ 2456.063725] io_submit_sqes+0x6fe6/0x8610 [ 2456.064724] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2456.065886] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2456.067046] ? find_held_lock+0x2c/0x110 [ 2456.068000] ? io_submit_sqes+0x8610/0x8610 [ 2456.069009] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2456.070134] ? wait_for_completion_io+0x270/0x270 [ 2456.071293] ? rcu_read_lock_any_held+0x75/0xa0 [ 2456.072374] ? vfs_write+0x354/0xb10 [ 2456.073239] ? fput_many+0x2f/0x1a0 [ 2456.074090] ? ksys_write+0x1a9/0x260 [ 2456.075003] ? __ia32_sys_read+0xb0/0xb0 [ 2456.075956] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2456.077177] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2456.078381] do_syscall_64+0x33/0x40 [ 2456.079278] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2456.080470] RIP: 0033:0x7f0bbbb8ab19 [ 2456.081337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2456.085639] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2456.087433] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2456.089095] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2456.090784] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2456.092445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2456.094106] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:38:52 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x74) 05:38:52 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000900)=ANY=[@ANYBLOB="050000010001000000000000000000008fc1a0e0346da2657ed2c03759bf94775ac815db0895a7b3a29bbeb6d9b1512854781a56d470290a6f69cf7d9a16f5e3b1b7401e21e5f9fbc6ec32782d5be943931f17ed217b88bd0400000000000000d724bb0b20873cc6c142f123a3e25c9aceaac29cbcbe86cbbc8c9798c91c3064b18039b7a092f9fe851b2128859add1ee22ee93ba086c44e814787b75fa8bd6576d36347393d0478985f66f068f45c60ea19b18a5ff6497ae37e1856ccb613e6dca9d43f4a329230aa24d549e818ad05d9917d2796d65c0ce06a2511daea0851681da5e59cf60e4e3e97f14f8a4901cc944616bbf69048eea8c9c35d1ea0ee7b6494a55a0ad4e542ce55c58429eb1879aa3450e6f4824ce0b5406ce02f592d1daac53636bf590000000000963acfedd9de45c33fe539525bb1841a7fa6c3aed257d20404409791c2f72672d3430755b8ea0be5a1b207496fa4f1230501850ac539d921348f8d05979aa0945492d77fc2698195162c86c9651f93ab6bff2a8687ac524d9305687d67f8c98052d1b9a22f33a9c4753fc5ca61b5bf2c9b135337fa923db6afb48fce6884ab9157eeef7b607c2e4d9420c3543d853d16460f6540f1d4b0f07d359d53bdb3fe9325ef4fab9418c413230d370b02a9d1714a0ba42773cde122667dbd", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0xfffffffffffffd36) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:38:52 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r3 = fork() ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:38:52 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8) 05:38:52 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x7a) 05:38:52 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:38:52 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x300) 05:38:52 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 69) [ 2456.496506] FAULT_INJECTION: forcing a failure. [ 2456.496506] name failslab, interval 1, probability 0, space 0, times 0 [ 2456.499096] CPU: 0 PID: 40110 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2456.500602] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2456.502305] Call Trace: [ 2456.502910] dump_stack+0x107/0x167 [ 2456.503707] should_fail.cold+0x5/0xa [ 2456.504547] ? create_object.isra.0+0x3a/0xa20 [ 2456.505553] should_failslab+0x5/0x20 [ 2456.506386] kmem_cache_alloc+0x5b/0x310 [ 2456.507306] ? mark_held_locks+0x9e/0xe0 [ 2456.508195] create_object.isra.0+0x3a/0xa20 [ 2456.509152] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2456.510265] kmem_cache_alloc_bulk+0x168/0x320 [ 2456.511296] io_submit_sqes+0x6fe6/0x8610 [ 2456.512226] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2456.513315] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2456.514364] ? find_held_lock+0x2c/0x110 [ 2456.515279] ? io_submit_sqes+0x8610/0x8610 [ 2456.516222] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2456.517272] ? wait_for_completion_io+0x270/0x270 [ 2456.518329] ? rcu_read_lock_any_held+0x75/0xa0 [ 2456.519367] ? vfs_write+0x354/0xb10 [ 2456.520176] ? fput_many+0x2f/0x1a0 [ 2456.520969] ? ksys_write+0x1a9/0x260 [ 2456.521797] ? __ia32_sys_read+0xb0/0xb0 [ 2456.522705] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2456.523870] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2456.524999] do_syscall_64+0x33/0x40 [ 2456.525811] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2456.526956] RIP: 0033:0x7f0bbbb8ab19 [ 2456.527763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2456.531799] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2456.533457] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2456.535037] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2456.536591] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2456.538148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2456.539723] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:39:07 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:39:07 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4308, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x12000, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@cache_none}]}}) r3 = fork() ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:39:07 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:39:07 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 05:39:07 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:39:07 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 05:39:07 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x500) 05:39:07 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 70) [ 2471.575308] FAULT_INJECTION: forcing a failure. [ 2471.575308] name failslab, interval 1, probability 0, space 0, times 0 [ 2471.577097] CPU: 1 PID: 40128 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2471.578017] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2471.579120] Call Trace: [ 2471.579482] dump_stack+0x107/0x167 [ 2471.579959] should_fail.cold+0x5/0xa [ 2471.580465] ? create_object.isra.0+0x3a/0xa20 [ 2471.581074] should_failslab+0x5/0x20 [ 2471.581582] kmem_cache_alloc+0x5b/0x310 [ 2471.582131] ? mark_held_locks+0x9e/0xe0 [ 2471.582680] create_object.isra.0+0x3a/0xa20 [ 2471.583275] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2471.583960] kmem_cache_alloc_bulk+0x168/0x320 [ 2471.584579] io_submit_sqes+0x6fe6/0x8610 [ 2471.585143] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2471.585805] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2471.586462] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2471.587108] ? find_held_lock+0x2c/0x110 [ 2471.587656] ? io_submit_sqes+0x8610/0x8610 [ 2471.588236] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2471.588879] ? wait_for_completion_io+0x270/0x270 [ 2471.589526] ? rcu_read_lock_any_held+0x75/0xa0 [ 2471.590135] ? vfs_write+0x354/0xb10 [ 2471.590634] ? fput_many+0x2f/0x1a0 [ 2471.591120] ? ksys_write+0x1a9/0x260 [ 2471.591624] ? __ia32_sys_read+0xb0/0xb0 [ 2471.592168] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2471.592852] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2471.593527] do_syscall_64+0x33/0x40 [ 2471.594019] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2471.594695] RIP: 0033:0x7f0c174efb19 [ 2471.595195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2471.597636] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2471.598641] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2471.599576] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2471.600523] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2471.601465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2471.602410] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 [ 2471.614368] FAULT_INJECTION: forcing a failure. [ 2471.614368] name failslab, interval 1, probability 0, space 0, times 0 [ 2471.617255] CPU: 0 PID: 40133 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2471.618687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2471.620427] Call Trace: [ 2471.620988] dump_stack+0x107/0x167 [ 2471.621767] should_fail.cold+0x5/0xa [ 2471.622574] ? create_object.isra.0+0x3a/0xa20 [ 2471.623567] should_failslab+0x5/0x20 [ 2471.624362] kmem_cache_alloc+0x5b/0x310 [ 2471.625212] ? mark_held_locks+0x9e/0xe0 [ 2471.626073] create_object.isra.0+0x3a/0xa20 [ 2471.627018] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2471.628090] kmem_cache_alloc_bulk+0x168/0x320 [ 2471.629065] io_submit_sqes+0x6fe6/0x8610 [ 2471.630169] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2471.631267] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2471.632513] ? find_held_lock+0x2c/0x110 [ 2471.633485] ? io_submit_sqes+0x8610/0x8610 [ 2471.634598] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2471.635643] ? wait_for_completion_io+0x270/0x270 [ 2471.636883] ? rcu_read_lock_any_held+0x75/0xa0 [ 2471.637851] ? vfs_write+0x354/0xb10 [ 2471.638814] ? fput_many+0x2f/0x1a0 [ 2471.639608] ? ksys_write+0x1a9/0x260 [ 2471.640587] ? __ia32_sys_read+0xb0/0xb0 [ 2471.641523] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2471.642887] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2471.643982] do_syscall_64+0x33/0x40 [ 2471.644805] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2471.645886] RIP: 0033:0x7f0bbbb8ab19 [ 2471.646675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2471.650481] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2471.652104] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2471.653613] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2471.655138] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2471.656628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2471.658130] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:39:07 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x600) 05:39:07 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2844) 05:39:07 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:39:07 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x700) 05:39:07 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) [ 2471.860477] FAULT_INJECTION: forcing a failure. [ 2471.860477] name failslab, interval 1, probability 0, space 0, times 0 [ 2471.862082] CPU: 1 PID: 40468 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2471.862907] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2471.863874] Call Trace: [ 2471.864188] dump_stack+0x107/0x167 [ 2471.864618] should_fail.cold+0x5/0xa [ 2471.865070] ? create_object.isra.0+0x3a/0xa20 [ 2471.865599] should_failslab+0x5/0x20 [ 2471.866045] kmem_cache_alloc+0x5b/0x310 [ 2471.866520] ? mark_held_locks+0x9e/0xe0 [ 2471.867007] create_object.isra.0+0x3a/0xa20 [ 2471.867521] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2471.868110] kmem_cache_alloc_bulk+0x168/0x320 [ 2471.868651] io_submit_sqes+0x6fe6/0x8610 [ 2471.869137] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2471.869716] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2471.870293] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2471.870857] ? find_held_lock+0x2c/0x110 [ 2471.871333] ? io_submit_sqes+0x8610/0x8610 [ 2471.871837] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2471.872396] ? wait_for_completion_io+0x270/0x270 [ 2471.872954] ? rcu_read_lock_any_held+0x75/0xa0 [ 2471.873495] ? vfs_write+0x354/0xb10 [ 2471.873927] ? fput_many+0x2f/0x1a0 [ 2471.874348] ? ksys_write+0x1a9/0x260 [ 2471.874788] ? __ia32_sys_read+0xb0/0xb0 [ 2471.875270] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2471.875878] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2471.876473] do_syscall_64+0x33/0x40 [ 2471.876910] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2471.877504] RIP: 0033:0x7f0c174efb19 [ 2471.877940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2471.880075] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2471.880953] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2471.881772] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 05:39:07 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') r3 = fsmount(r2, 0x1, 0x70) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000280)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x1b) pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d66642c72761c986f70", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=none,\x00']) r4 = fork() ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) [ 2471.882600] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2471.883635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2471.884457] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 05:39:07 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2845) 05:39:07 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0xa00) [ 2471.981284] 9pnet: Insufficient options for proto=fd 05:39:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:39:22 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:39:22 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:39:22 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x4800) 05:39:22 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 71) 05:39:22 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2846) 05:39:22 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 05:39:22 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/55, 0x37, 0x0) fsmount(r1, 0x1, 0xec) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r4, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) dup2(r0, r5) r6 = fork() ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) [ 2486.152875] FAULT_INJECTION: forcing a failure. [ 2486.152875] name failslab, interval 1, probability 0, space 0, times 0 [ 2486.154463] CPU: 1 PID: 40707 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2486.155322] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2486.156338] Call Trace: [ 2486.156680] dump_stack+0x107/0x167 [ 2486.157131] should_fail.cold+0x5/0xa [ 2486.157601] ? create_object.isra.0+0x3a/0xa20 [ 2486.158174] should_failslab+0x5/0x20 [ 2486.158645] kmem_cache_alloc+0x5b/0x310 [ 2486.159155] ? mark_held_locks+0x9e/0xe0 [ 2486.159655] create_object.isra.0+0x3a/0xa20 [ 2486.160199] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2486.160817] kmem_cache_alloc_bulk+0x168/0x320 [ 2486.161376] io_submit_sqes+0x6fe6/0x8610 [ 2486.161892] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2486.162501] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2486.163099] ? find_held_lock+0x2c/0x110 [ 2486.163593] ? io_submit_sqes+0x8610/0x8610 [ 2486.164127] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2486.164712] ? wait_for_completion_io+0x270/0x270 [ 2486.165297] ? rcu_read_lock_any_held+0x75/0xa0 [ 2486.165856] ? vfs_write+0x354/0xb10 [ 2486.166309] ? fput_many+0x2f/0x1a0 [ 2486.166753] ? ksys_write+0x1a9/0x260 [ 2486.167227] ? __ia32_sys_read+0xb0/0xb0 [ 2486.167722] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2486.168365] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2486.168990] do_syscall_64+0x33/0x40 [ 2486.169448] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2486.170078] RIP: 0033:0x7f0bbbb8ab19 [ 2486.170533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2486.172787] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2486.173718] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2486.174596] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2486.175476] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2486.176341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2486.177206] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:39:22 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x4c00) [ 2486.210161] FAULT_INJECTION: forcing a failure. [ 2486.210161] name failslab, interval 1, probability 0, space 0, times 0 [ 2486.211651] CPU: 1 PID: 40701 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2486.212484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2486.213485] Call Trace: [ 2486.213809] dump_stack+0x107/0x167 [ 2486.214249] should_fail.cold+0x5/0xa [ 2486.214712] ? create_object.isra.0+0x3a/0xa20 [ 2486.215272] should_failslab+0x5/0x20 [ 2486.215725] kmem_cache_alloc+0x5b/0x310 [ 2486.216210] ? lock_acquire+0x197/0x470 [ 2486.216685] create_object.isra.0+0x3a/0xa20 [ 2486.217210] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2486.217812] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2486.218425] create_io_worker+0xe8/0x690 [ 2486.218906] io_wqe_enqueue+0x69e/0xbe0 [ 2486.219392] ? create_worker_cb+0x260/0x260 [ 2486.219902] ? io_prep_async_work+0x340/0x550 [ 2486.220443] io_queue_async_work+0x26b/0x4f0 [ 2486.220968] __io_queue_sqe+0x5cc/0x9d0 [ 2486.221443] ? io_issue_sqe+0x77b0/0x77b0 [ 2486.221936] ? __fget_files+0x2f8/0x520 [ 2486.222420] io_submit_sqes+0x44aa/0x8610 [ 2486.222929] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2486.223528] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2486.224099] ? find_held_lock+0x2c/0x110 [ 2486.224582] ? io_submit_sqes+0x8610/0x8610 [ 2486.225104] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2486.225688] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2486.226311] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2486.226946] ? trace_hardirqs_on+0x5b/0x180 [ 2486.227466] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2486.228113] ? __io_uring_cancel+0x20/0x20 [ 2486.228616] do_syscall_64+0x33/0x40 [ 2486.229057] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2486.229667] RIP: 0033:0x7f0c174efb19 [ 2486.230111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2486.232315] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2486.233221] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2486.234074] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2486.234925] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2486.235777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2486.236610] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 05:39:22 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:39:22 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2847) 05:39:22 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x6800) 05:39:22 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 72) 05:39:22 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 05:39:22 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@mcast1, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000006c0)=ANY=[@ANYRES16=r6, @ANYRESDEC=r2, @ANYRES64=r7]) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) [ 2486.438361] FAULT_INJECTION: forcing a failure. [ 2486.438361] name failslab, interval 1, probability 0, space 0, times 0 [ 2486.439790] CPU: 1 PID: 40921 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2486.440592] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2486.441547] Call Trace: [ 2486.441856] dump_stack+0x107/0x167 [ 2486.442273] should_fail.cold+0x5/0xa [ 2486.442712] ? create_object.isra.0+0x3a/0xa20 [ 2486.443243] should_failslab+0x5/0x20 [ 2486.443681] kmem_cache_alloc+0x5b/0x310 [ 2486.444152] ? find_held_lock+0x2c/0x110 [ 2486.444619] create_object.isra.0+0x3a/0xa20 [ 2486.445121] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2486.445706] __kmalloc_node+0x1ae/0x420 [ 2486.446170] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2486.446747] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 2486.447343] kmem_cache_alloc_bulk+0x182/0x320 [ 2486.447870] io_submit_sqes+0x6fe6/0x8610 [ 2486.448351] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2486.448924] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2486.449504] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2486.450057] ? find_held_lock+0x2c/0x110 [ 2486.450529] ? io_submit_sqes+0x8610/0x8610 [ 2486.451037] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2486.451599] ? wait_for_completion_io+0x270/0x270 [ 2486.452151] ? rcu_read_lock_any_held+0x75/0xa0 [ 2486.452685] ? vfs_write+0x354/0xb10 [ 2486.453110] ? fput_many+0x2f/0x1a0 [ 2486.453527] ? ksys_write+0x1a9/0x260 [ 2486.453961] ? __ia32_sys_read+0xb0/0xb0 [ 2486.454427] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2486.455042] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2486.455649] do_syscall_64+0x33/0x40 [ 2486.456078] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2486.456664] RIP: 0033:0x7f0c174efb19 [ 2486.457091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2486.459207] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2486.460085] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2486.460900] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2486.461716] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2486.462534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2486.463368] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 [ 2486.485916] FAULT_INJECTION: forcing a failure. [ 2486.485916] name failslab, interval 1, probability 0, space 0, times 0 [ 2486.488752] CPU: 0 PID: 40928 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2486.490227] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2486.491990] Call Trace: [ 2486.492561] dump_stack+0x107/0x167 [ 2486.493341] should_fail.cold+0x5/0xa [ 2486.494147] ? create_object.isra.0+0x3a/0xa20 [ 2486.495132] should_failslab+0x5/0x20 [ 2486.495932] kmem_cache_alloc+0x5b/0x310 [ 2486.496792] ? mark_held_locks+0x9e/0xe0 [ 2486.497657] create_object.isra.0+0x3a/0xa20 [ 2486.498581] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2486.499672] kmem_cache_alloc_bulk+0x168/0x320 [ 2486.500633] io_submit_sqes+0x6fe6/0x8610 [ 2486.501545] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2486.502590] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2486.503622] ? find_held_lock+0x2c/0x110 [ 2486.504482] ? io_submit_sqes+0x8610/0x8610 [ 2486.505401] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2486.506412] ? wait_for_completion_io+0x270/0x270 [ 2486.507435] ? rcu_read_lock_any_held+0x75/0xa0 [ 2486.508417] ? vfs_write+0x354/0xb10 05:39:22 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="050000010001000000000000000000008fc1a0e0346da2657ed2c03759bf94775ac815db0895a7b3a29bc5b6d9b1512854781a56d470290a6f69cf7d9a16f5e3b1b7401e21e5f9fbc6ec32782d5be943931f17ed217b88bd0400000000000000d724079420873cc6a874f123a3e25c9aceaac29cbcbe86cbbc8c9798c91c3064b18039b7a092f9fe851b2128859add1ee22ee93ba086c411961389e14e814787b75fa8bd6576d36347393d0478985f66f068d15c60ea19b18a5ff6497ae37e1856ccb613e6dca9d43f4a329230aa24d549e818ad05d9917d2796d65c0ce06a2511daea0851681da5e59ef60e4e3ef69048eea8c9c35d1ea0ee7b6494a55a0ad4e542ce55c58429eb1879aa3450e6f4824ce0b5406ce02f592d1daac53636bf59", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) [ 2486.509201] ? fput_many+0x2f/0x1a0 [ 2486.510135] ? ksys_write+0x1a9/0x260 [ 2486.510930] ? __ia32_sys_read+0xb0/0xb0 [ 2486.511793] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2486.512891] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2486.513971] do_syscall_64+0x33/0x40 [ 2486.514757] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2486.515850] RIP: 0033:0x7f0bbbb8ab19 [ 2486.516629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2486.520530] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2486.522118] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2486.523615] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2486.525107] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2486.526609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2486.528122] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:39:37 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x6c00) 05:39:37 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:39:37 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00) 05:39:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:39:37 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000001, 0x4000010, r0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x847d, 0x0, 0x2, 0x269}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r6}}, 0x1) r7 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r0, 0x0) pread64(r7, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) creat(&(0x7f0000000000)='./file1\x00', 0x80) r8 = fork() ptrace$getregset(0x4204, r8, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:39:37 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 73) 05:39:37 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000700)=ANY=[@ANYBLOB="050000010001000000000000040000008fc1a0e0346da2657ed2c03759bf94775ac815db0895a7b3a29bc5b6d9b1512854781a56d470290a6f08007d9a16f5e3b1b7401e21e5f9fbc6ec32782d5be943931f17ed217b88bd0400000000000000d724079420873cc6a874f123a3e25c9aceaac29cbcbe86cbbc8c9798c91c3064b18039b7a092f9fe851b2128859add1ee22ee93ba086c411961389e14e814787b75fa8bd6176d36347393d0478985f66f068d15c60ea19b18a5ff6497ae37e1856ccb630aa24d549e818ad05d9917d2796d65c0ce06a2511daea0851681da5e59ef60e4e3ef69048eea8c9c35d1ea0ee7b6494a55a0ad4e542ce55c58429eb1879aa3450e6f4824ce0b5406ce02f592d1daac53636bf59dbe2f4c3aa0ca98670aaad61ed7fff72065c5da54a5b9c3a3ec9a89287e575b7a49e2ac686a4d31dbef92d22cd58ba783e87b0cda163829728b0590a77967c389f3bd75155daf7460863e31476e7f0b8c78fbda2acba07c09730375352deeb4eb3e7cf70d5ea8271fd5a4e73f198d1ccadbe88be8d8d263966e85b0bb4e2f5b0f3810923163d46be691188997f0c2e92a18ec3c7b399de0a449b250eff4996f2f46d0584b690ec9eef00"/459, @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x4, 0x1, 0xff, 0x8, 0xeb, @remote, @mcast1, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:39:37 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) [ 2501.902460] FAULT_INJECTION: forcing a failure. [ 2501.902460] name failslab, interval 1, probability 0, space 0, times 0 [ 2501.905364] CPU: 1 PID: 41074 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2501.906842] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2501.908588] Call Trace: [ 2501.909154] dump_stack+0x107/0x167 [ 2501.909926] should_fail.cold+0x5/0xa [ 2501.910743] should_failslab+0x5/0x20 [ 2501.911549] kmem_cache_alloc_bulk+0x4b/0x320 [ 2501.912506] io_submit_sqes+0x6fe6/0x8610 [ 2501.913419] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2501.914475] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2501.915506] ? find_held_lock+0x2c/0x110 [ 2501.916360] ? io_submit_sqes+0x8610/0x8610 [ 2501.917292] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2501.918314] ? wait_for_completion_io+0x270/0x270 [ 2501.919347] ? rcu_read_lock_any_held+0x75/0xa0 [ 2501.920335] ? vfs_write+0x354/0xb10 [ 2501.921117] ? fput_many+0x2f/0x1a0 [ 2501.921883] ? ksys_write+0x1a9/0x260 [ 2501.922690] ? __ia32_sys_read+0xb0/0xb0 [ 2501.923560] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2501.924667] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2501.925760] do_syscall_64+0x33/0x40 [ 2501.926552] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2501.927649] RIP: 0033:0x7f0bbbb8ab19 [ 2501.928452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2501.932359] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2501.933990] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2501.935511] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2501.937034] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2501.938603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2501.940548] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:39:37 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x7400) [ 2501.952893] FAULT_INJECTION: forcing a failure. [ 2501.952893] name failslab, interval 1, probability 0, space 0, times 0 [ 2501.955610] CPU: 1 PID: 41073 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2501.957087] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2501.958843] Call Trace: [ 2501.959411] dump_stack+0x107/0x167 [ 2501.960184] should_fail.cold+0x5/0xa [ 2501.961000] ? create_object.isra.0+0x3a/0xa20 [ 2501.961980] should_failslab+0x5/0x20 [ 2501.962790] kmem_cache_alloc+0x5b/0x310 [ 2501.963665] create_object.isra.0+0x3a/0xa20 [ 2501.964594] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2501.965683] kmem_cache_alloc_node+0x169/0x330 [ 2501.966658] copy_process+0x5e5/0x78b0 [ 2501.967498] ? stack_trace_save+0x8c/0xc0 [ 2501.968382] ? stack_trace_consume_entry+0x160/0x160 [ 2501.969462] ? kasan_save_stack+0x32/0x40 [ 2501.970336] ? __cleanup_sighand+0xb0/0xb0 [ 2501.971248] ? do_syscall_64+0x33/0x40 [ 2501.972082] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2501.973202] ? lock_acquire+0x197/0x470 [ 2501.974045] ? create_object.isra.0+0x3ad/0xa20 [ 2501.975021] ? lock_release+0x680/0x680 [ 2501.975868] ? find_held_lock+0x2c/0x110 [ 2501.976742] ? io_wqe_dec_running+0x220/0x220 [ 2501.977693] create_io_thread+0xb6/0xf0 [ 2501.978536] ? pidfd_prepare+0x80/0x80 [ 2501.979370] ? mark_held_locks+0x9e/0xe0 [ 2501.980230] ? io_wqe_dec_running+0x220/0x220 [ 2501.981182] ? __init_swait_queue_head+0xc6/0x150 [ 2501.982198] create_io_worker+0x23a/0x690 [ 2501.983078] io_wqe_enqueue+0x69e/0xbe0 [ 2501.983933] ? create_worker_cb+0x260/0x260 [ 2501.984854] ? io_prep_async_work+0x340/0x550 [ 2501.985801] io_queue_async_work+0x26b/0x4f0 [ 2501.986742] __io_queue_sqe+0x5cc/0x9d0 [ 2501.987597] ? io_issue_sqe+0x77b0/0x77b0 [ 2501.988469] ? __fget_files+0x2f8/0x520 [ 2501.989326] io_submit_sqes+0x44aa/0x8610 [ 2501.990234] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2501.991294] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2501.992311] ? find_held_lock+0x2c/0x110 [ 2501.993183] ? io_submit_sqes+0x8610/0x8610 [ 2501.994094] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2501.995113] ? wait_for_completion_io+0x270/0x270 [ 2501.996143] ? rcu_read_lock_any_held+0x75/0xa0 [ 2501.997119] ? vfs_write+0x354/0xb10 [ 2501.997905] ? fput_many+0x2f/0x1a0 [ 2501.998677] ? ksys_write+0x1a9/0x260 [ 2501.999490] ? __ia32_sys_read+0xb0/0xb0 [ 2502.000347] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2502.001454] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2502.002544] do_syscall_64+0x33/0x40 [ 2502.003336] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2502.004427] RIP: 0033:0x7f0c174efb19 [ 2502.005208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2502.009092] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2502.010695] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2502.012201] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2502.013705] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2502.015217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2502.016722] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 05:39:38 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x7a00) 05:39:38 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000) 05:39:38 executing program 6: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="050000010001000000000000000000008bc1a0e0346da2657ed2c03759bf94775ac815db0895a7b3a29bc5b6d9b1512854781a56d470290a6f69cf7d9a16f5e3b1b7401e21e5f9fbc6ec32782d5be943931f17ed217b88bd0400000000000000d724079420873cc6a874f123a3e25c9aceaac29cbcbe86cbbc8c9798c91c3064b18039b7a092f9fe851b2128859add1ee22ee93ba086c411961389e14e814787b75fa8bd6576d36347393d0478985f66f068d15c60ea19b18a5ff6497ae37e1856ccb613e6dca9d43f4a329230aa24d549e818ad05d991862796d65c0ce06a1611daea0851681da5e59ef60e4e3ef69053eea8c9c35d1ea0ee7b6494a55a0ad4e542ce55c58429eb1879aa3450e6f4824ce0b5406ce02f592d1daac53636bf79", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:39:38 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x80000) 05:39:38 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 74) 05:39:38 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x100000) 05:39:38 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 05:39:38 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7290, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r4 = fork() ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) [ 2502.422553] FAULT_INJECTION: forcing a failure. [ 2502.422553] name failslab, interval 1, probability 0, space 0, times 0 [ 2502.425188] CPU: 0 PID: 41347 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2502.426663] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2502.428593] Call Trace: [ 2502.429319] dump_stack+0x107/0x167 [ 2502.430327] should_fail.cold+0x5/0xa [ 2502.431398] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2502.432832] should_failslab+0x5/0x20 [ 2502.433753] __kmalloc_node+0x76/0x420 [ 2502.434703] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2502.436061] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 2502.437365] ? trace_hardirqs_on+0x5b/0x180 [ 2502.438532] kmem_cache_alloc_bulk+0x182/0x320 [ 2502.439798] io_submit_sqes+0x6fe6/0x8610 [ 2502.440942] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2502.442269] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2502.443574] ? find_held_lock+0x2c/0x110 [ 2502.444673] ? io_submit_sqes+0x8610/0x8610 [ 2502.445844] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2502.447136] ? wait_for_completion_io+0x270/0x270 [ 2502.448423] ? rcu_read_lock_any_held+0x75/0xa0 [ 2502.449680] ? vfs_write+0x354/0xb10 [ 2502.450674] ? fput_many+0x2f/0x1a0 [ 2502.451670] ? ksys_write+0x1a9/0x260 [ 2502.452714] ? __ia32_sys_read+0xb0/0xb0 [ 2502.453779] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2502.455192] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2502.456555] do_syscall_64+0x33/0x40 [ 2502.457528] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2502.458898] RIP: 0033:0x7f0bbbb8ab19 [ 2502.459910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2502.464763] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2502.466594] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2502.468280] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2502.469709] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2502.471142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2502.472579] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 [ 2502.498685] FAULT_INJECTION: forcing a failure. [ 2502.498685] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2502.502190] CPU: 1 PID: 41420 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2502.503945] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2502.506051] Call Trace: [ 2502.506722] dump_stack+0x107/0x167 [ 2502.507654] should_fail.cold+0x5/0xa [ 2502.508622] __alloc_pages_nodemask+0x182/0x600 [ 2502.509804] ? lock_downgrade+0x6d0/0x6d0 [ 2502.510855] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2502.512363] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2502.513657] ? kmem_cache_alloc_node+0x2bc/0x330 [ 2502.514853] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2502.516204] copy_process+0x62b/0x78b0 [ 2502.517193] ? stack_trace_save+0x8c/0xc0 [ 2502.518247] ? stack_trace_consume_entry+0x160/0x160 [ 2502.519542] ? kasan_save_stack+0x32/0x40 [ 2502.520599] ? __cleanup_sighand+0xb0/0xb0 [ 2502.521668] ? do_syscall_64+0x33/0x40 [ 2502.522659] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2502.524009] ? lock_acquire+0x197/0x470 [ 2502.525006] ? create_object.isra.0+0x3ad/0xa20 [ 2502.526188] ? lock_release+0x680/0x680 [ 2502.527199] ? find_held_lock+0x2c/0x110 [ 2502.528235] ? io_wqe_dec_running+0x220/0x220 [ 2502.529378] create_io_thread+0xb6/0xf0 [ 2502.530391] ? pidfd_prepare+0x80/0x80 [ 2502.531381] ? mark_held_locks+0x9e/0xe0 [ 2502.532435] ? io_wqe_dec_running+0x220/0x220 [ 2502.533598] ? __init_swait_queue_head+0xc6/0x150 [ 2502.534811] create_io_worker+0x23a/0x690 [ 2502.535879] io_wqe_enqueue+0x69e/0xbe0 [ 2502.536884] ? create_worker_cb+0x260/0x260 [ 2502.537978] ? io_prep_async_work+0x340/0x550 [ 2502.539109] io_queue_async_work+0x26b/0x4f0 [ 2502.540248] __io_queue_sqe+0x5cc/0x9d0 [ 2502.541254] ? io_issue_sqe+0x77b0/0x77b0 [ 2502.542294] ? __fget_files+0x2f8/0x520 [ 2502.543296] io_submit_sqes+0x44aa/0x8610 [ 2502.544367] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2502.545625] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2502.546836] ? find_held_lock+0x2c/0x110 [ 2502.547864] ? io_submit_sqes+0x8610/0x8610 [ 2502.548960] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2502.550177] ? wait_for_completion_io+0x270/0x270 [ 2502.551379] ? rcu_read_lock_any_held+0x75/0xa0 [ 2502.552547] ? vfs_write+0x354/0xb10 [ 2502.553480] ? fput_many+0x2f/0x1a0 [ 2502.554401] ? ksys_write+0x1a9/0x260 [ 2502.555363] ? __ia32_sys_read+0xb0/0xb0 [ 2502.556406] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2502.557725] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2502.559012] do_syscall_64+0x33/0x40 [ 2502.559953] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2502.561265] RIP: 0033:0x7f0c174efb19 [ 2502.562198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2502.566799] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2502.568711] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2502.570462] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2502.572242] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2502.573994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2502.575767] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 05:39:57 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:39:57 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4428) 05:39:57 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:39:57 executing program 4: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000880)='./file1/file0\x00', 0x200) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) fsmount(r1, 0x0, 0x75) creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) execve(&(0x7f0000000100)='./file1/file0\x00', &(0x7f0000000280)=[&(0x7f0000000180)='9p\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='fdinfo/3\x00'], &(0x7f0000000580)=[&(0x7f00000002c0)='-@/%-\x00', &(0x7f0000000300)=']@\x00', &(0x7f0000000340)='9p\x00', &(0x7f0000000380)='+,(@\x7f/@+,(^(*\xea-\x00', &(0x7f0000000400)='9p\x00', &(0x7f0000000440)='\x00', &(0x7f0000000500)='\\:/(%\x00', &(0x7f0000000540)='\\.^@){\x00']) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r4, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d491f14510e5f3671382a64ec38795fb0e9a991ee0062539e01000000000000006d22f1fc3323a2ea05ca454387a294f59f8042e0e17f9787bc8fa6ffb37805c4225d2e9bda43734f35a84223e6c34b58084ae5bbd8c093df8c2b98e9504c658bde3c6943b40d7167ff5c4026715ee818fb2fab38213c", @ANYRESHEX=r2, @ANYBLOB="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", @ANYRESHEX=r3, @ANYBLOB="2c63616368653dfe07886cd584a56d61702c636163040000006f6e652c00a0e403902ba3b382d22c7ae5547c7971bd148e7daaad1946756d6654c31218236ee1a549bb3a3ce19c947aff54"]) r5 = fork() epoll_create(0x1) r6 = fork() ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:39:57 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x1000000) 05:39:57 executing program 6: r0 = syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000280)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000005c0)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRES64=r0, @ANYBLOB="4470a61fde7a5eb65bfe267270e6fbd015001a2b3bc1c8ad0f0e696a04ddbd4ebcb698744e0fbc47e6263cd4b151c4d36658aea39a991ab16e6727e24717975297738fae1477ad715d5690b2c861f12b73d5dcb3f367716510e24b063df73892a7fbdbef5e14f4b1c2e715f242025de317c9a78f88ebca9d6b6351a3641aaa6a6bc8c039a97cb499727cc826057d63b2760b131be4e205f3cb1c82bc3e768e70dc4dfbd88c45a603f891ceb2f8901452d2240a1ba5ee07c12cf900f81b7cd51cfda1b1074103cab841afd376979c3ad04c784d2ca2eac08e5801", @ANYRESHEX, @ANYRESOCT=r5]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) 05:39:57 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 75) 05:39:57 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) [ 2521.427917] FAULT_INJECTION: forcing a failure. [ 2521.427917] name failslab, interval 1, probability 0, space 0, times 0 [ 2521.430730] CPU: 0 PID: 41541 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2521.432213] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2521.433972] Call Trace: [ 2521.434561] dump_stack+0x107/0x167 [ 2521.435344] should_fail.cold+0x5/0xa [ 2521.436160] ? __delayacct_tsk_init+0x1b/0x80 [ 2521.437121] should_failslab+0x5/0x20 [ 2521.437929] kmem_cache_alloc+0x5b/0x310 [ 2521.438795] __delayacct_tsk_init+0x1b/0x80 [ 2521.439718] copy_process+0x3395/0x78b0 [ 2521.440572] ? stack_trace_save+0x8c/0xc0 [ 2521.441457] ? stack_trace_consume_entry+0x160/0x160 [ 2521.442549] ? __cleanup_sighand+0xb0/0xb0 [ 2521.443439] ? do_syscall_64+0x33/0x40 [ 2521.444276] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2521.445421] ? lock_acquire+0x197/0x470 [ 2521.446265] ? create_object.isra.0+0x3ad/0xa20 [ 2521.446856] 9pnet: Insufficient options for proto=fd [ 2521.447251] ? lock_release+0x680/0x680 [ 2521.447269] ? find_held_lock+0x2c/0x110 [ 2521.447297] ? io_wqe_dec_running+0x220/0x220 [ 2521.447316] create_io_thread+0xb6/0xf0 [ 2521.447334] ? pidfd_prepare+0x80/0x80 [ 2521.447359] ? mark_held_locks+0x9e/0xe0 [ 2521.453534] ? io_wqe_dec_running+0x220/0x220 [ 2521.454509] ? __init_swait_queue_head+0xc6/0x150 [ 2521.455539] create_io_worker+0x23a/0x690 [ 2521.456423] io_wqe_enqueue+0x69e/0xbe0 [ 2521.457282] ? create_worker_cb+0x260/0x260 [ 2521.458192] ? io_prep_async_work+0x340/0x550 [ 2521.459146] io_queue_async_work+0x26b/0x4f0 [ 2521.460096] __io_queue_sqe+0x5cc/0x9d0 [ 2521.460955] ? io_issue_sqe+0x77b0/0x77b0 [ 2521.461853] ? __fget_files+0x2f8/0x520 [ 2521.462725] io_submit_sqes+0x44aa/0x8610 [ 2521.463642] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2521.464704] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2521.465737] ? find_held_lock+0x2c/0x110 [ 2521.466599] ? io_submit_sqes+0x8610/0x8610 [ 2521.467529] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2521.468552] ? wait_for_completion_io+0x270/0x270 [ 2521.469571] ? rcu_read_lock_any_held+0x75/0xa0 [ 2521.470566] ? vfs_write+0x354/0xb10 [ 2521.471357] ? fput_many+0x2f/0x1a0 [ 2521.472134] ? ksys_write+0x1a9/0x260 [ 2521.472940] ? __ia32_sys_read+0xb0/0xb0 [ 2521.473801] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2521.474914] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2521.476010] do_syscall_64+0x33/0x40 [ 2521.476801] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2521.477892] RIP: 0033:0x7f0c174efb19 [ 2521.478683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2521.482576] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2521.484178] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2521.485700] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2521.487200] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2521.488712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2521.490222] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 05:39:57 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x2000000) 05:39:57 executing program 6: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00) [ 2521.533610] FAULT_INJECTION: forcing a failure. [ 2521.533610] name failslab, interval 1, probability 0, space 0, times 0 [ 2521.536302] CPU: 0 PID: 41549 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2521.537770] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2521.539527] Call Trace: [ 2521.540095] dump_stack+0x107/0x167 [ 2521.540863] should_fail.cold+0x5/0xa [ 2521.541674] ? create_object.isra.0+0x3a/0xa20 [ 2521.542644] should_failslab+0x5/0x20 [ 2521.543454] kmem_cache_alloc+0x5b/0x310 [ 2521.544318] ? mark_held_locks+0x9e/0xe0 [ 2521.545176] create_object.isra.0+0x3a/0xa20 [ 2521.546106] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2521.547179] kmem_cache_alloc_bulk+0x168/0x320 [ 2521.548153] io_submit_sqes+0x6fe6/0x8610 [ 2521.549082] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2521.550157] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2521.551196] ? find_held_lock+0x2c/0x110 [ 2521.552094] ? io_submit_sqes+0x8610/0x8610 [ 2521.553042] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2521.554081] ? wait_for_completion_io+0x270/0x270 [ 2521.555114] ? rcu_read_lock_any_held+0x75/0xa0 [ 2521.556103] ? vfs_write+0x354/0xb10 [ 2521.556882] ? fput_many+0x2f/0x1a0 [ 2521.557648] ? ksys_write+0x1a9/0x260 [ 2521.558463] ? __ia32_sys_read+0xb0/0xb0 [ 2521.559327] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2521.560434] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2521.561539] do_syscall_64+0x33/0x40 [ 2521.562320] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2521.563405] RIP: 0033:0x7f0bbbb8ab19 [ 2521.564206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2521.568114] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2521.569724] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2521.571250] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2521.572770] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2521.574273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2521.575780] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:39:57 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4528) 05:39:57 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x3000000) 05:40:12 executing program 6: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000880)='./file1/file0\x00', 0x200) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) fsmount(r1, 0x0, 0x75) creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) execve(&(0x7f0000000100)='./file1/file0\x00', &(0x7f0000000280)=[&(0x7f0000000180)='9p\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='fdinfo/3\x00'], &(0x7f0000000580)=[&(0x7f00000002c0)='-@/%-\x00', &(0x7f0000000300)=']@\x00', &(0x7f0000000340)='9p\x00', &(0x7f0000000380)='+,(@\x7f/@+,(^(*\xea-\x00', &(0x7f0000000400)='9p\x00', &(0x7f0000000440)='\x00', &(0x7f0000000500)='\\:/(%\x00', &(0x7f0000000540)='\\.^@){\x00']) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r4, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d491f14510e5f3671382a64ec38795fb0e9a991ee0062539e01000000000000006d22f1fc3323a2ea05ca454387a294f59f8042e0e17f9787bc8fa6ffb37805c4225d2e9bda43734f35a84223e6c34b58084ae5bbd8c093df8c2b98e9504c658bde3c6943b40d7167ff5c4026715ee818fb2fab38213c", @ANYRESHEX=r2, @ANYBLOB="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", @ANYRESHEX=r3, @ANYBLOB="2c63616368653dfe07886cd584a56d61702c636163040000006f6e652c00a0e403902ba3b382d22c7ae5547c7971bd148e7daaad1946756d6654c31218236ee1a549bb3a3ce19c947aff54"]) r5 = fork() epoll_create(0x1) r6 = fork() ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:40:12 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:40:12 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:40:12 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',of`no=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=none,\x00']) r3 = fork() ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:40:12 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 76) 05:40:12 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x4000000) 05:40:12 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 05:40:12 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4628) [ 2536.661279] 9pnet: Insufficient options for proto=fd [ 2536.689631] FAULT_INJECTION: forcing a failure. [ 2536.689631] name failslab, interval 1, probability 0, space 0, times 0 [ 2536.692421] CPU: 0 PID: 41900 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2536.693956] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2536.695834] Call Trace: [ 2536.696424] dump_stack+0x107/0x167 [ 2536.697273] should_fail.cold+0x5/0xa [ 2536.698155] ? create_object.isra.0+0x3a/0xa20 [ 2536.699199] should_failslab+0x5/0x20 [ 2536.700065] kmem_cache_alloc+0x5b/0x310 [ 2536.700980] create_object.isra.0+0x3a/0xa20 [ 2536.701983] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2536.703140] kmem_cache_alloc+0x159/0x310 [ 2536.704109] __delayacct_tsk_init+0x1b/0x80 [ 2536.705083] copy_process+0x3395/0x78b0 [ 2536.705988] ? stack_trace_save+0x8c/0xc0 [ 2536.706934] ? stack_trace_consume_entry+0x160/0x160 [ 2536.708371] ? __cleanup_sighand+0xb0/0xb0 [ 2536.709567] ? do_syscall_64+0x33/0x40 [ 2536.710648] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2536.712183] ? lock_acquire+0x197/0x470 [ 2536.713206] ? create_object.isra.0+0x3ad/0xa20 [ 2536.714329] ? lock_release+0x680/0x680 [ 2536.715275] ? find_held_lock+0x2c/0x110 [ 2536.716267] ? io_wqe_dec_running+0x220/0x220 [ 2536.717317] create_io_thread+0xb6/0xf0 [ 2536.718256] ? pidfd_prepare+0x80/0x80 [ 2536.719155] ? mark_held_locks+0x9e/0xe0 [ 2536.720119] ? io_wqe_dec_running+0x220/0x220 [ 2536.721220] ? __init_swait_queue_head+0xc6/0x150 [ 2536.722357] create_io_worker+0x23a/0x690 [ 2536.723335] io_wqe_enqueue+0x69e/0xbe0 [ 2536.724291] ? create_worker_cb+0x260/0x260 [ 2536.725293] ? io_prep_async_work+0x340/0x550 [ 2536.726333] io_queue_async_work+0x26b/0x4f0 [ 2536.727364] __io_queue_sqe+0x5cc/0x9d0 [ 2536.728321] ? io_issue_sqe+0x77b0/0x77b0 [ 2536.729286] ? __fget_files+0x2f8/0x520 [ 2536.730241] io_submit_sqes+0x44aa/0x8610 [ 2536.731236] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2536.732605] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2536.732709] FAULT_INJECTION: forcing a failure. [ 2536.732709] name failslab, interval 1, probability 0, space 0, times 0 [ 2536.733962] ? find_held_lock+0x2c/0x110 [ 2536.734004] ? io_submit_sqes+0x8610/0x8610 [ 2536.734048] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2536.738857] ? wait_for_completion_io+0x270/0x270 [ 2536.739991] ? rcu_read_lock_any_held+0x75/0xa0 [ 2536.741073] ? vfs_write+0x354/0xb10 [ 2536.741942] ? fput_many+0x2f/0x1a0 [ 2536.742796] ? ksys_write+0x1a9/0x260 [ 2536.743707] ? __ia32_sys_read+0xb0/0xb0 [ 2536.744659] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2536.745856] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2536.747057] do_syscall_64+0x33/0x40 [ 2536.747943] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2536.749120] RIP: 0033:0x7f0c174efb19 [ 2536.749987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2536.754230] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2536.756013] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2536.757650] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2536.759298] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2536.760945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2536.762597] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 [ 2536.764278] CPU: 1 PID: 41894 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2536.765096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2536.766042] Call Trace: [ 2536.766348] dump_stack+0x107/0x167 [ 2536.766776] should_fail.cold+0x5/0xa [ 2536.767221] should_failslab+0x5/0x20 [ 2536.767665] kmem_cache_alloc_bulk+0x4b/0x320 [ 2536.768211] io_submit_sqes+0x6fe6/0x8610 [ 2536.768714] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2536.769286] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2536.769849] ? find_held_lock+0x2c/0x110 [ 2536.770319] ? io_submit_sqes+0x8610/0x8610 [ 2536.770818] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2536.771381] ? wait_for_completion_io+0x270/0x270 [ 2536.771945] ? rcu_read_lock_any_held+0x75/0xa0 [ 2536.772482] ? vfs_write+0x354/0xb10 [ 2536.772912] ? fput_many+0x2f/0x1a0 [ 2536.773331] ? ksys_write+0x1a9/0x260 [ 2536.773769] ? __ia32_sys_read+0xb0/0xb0 [ 2536.774243] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2536.774847] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2536.775438] do_syscall_64+0x33/0x40 [ 2536.775883] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2536.776468] RIP: 0033:0x7f0bbbb8ab19 [ 2536.776896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2536.779034] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2536.779919] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2536.780746] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2536.781567] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2536.782389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2536.783220] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:40:12 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4728) [ 2536.810658] 9pnet: Insufficient options for proto=fd 05:40:12 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x5000000) 05:40:12 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x6000000) 05:40:12 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4fea) 05:40:12 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) preadv(r3, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/156, 0x9c}, {&(0x7f0000000500)=""/166, 0xa6}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000000400)=""/23, 0x17}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f0000000440)=""/51, 0x33}], 0x6, 0x9, 0x9) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="7472616e73bd66642c7266646e6f3d6b84e5ed95000000008f2b11d0812f90353ec1836d586992a0146dec1651014943995fe93f7214efb8ccf0157554693fac5c068cfdcb8c711b623bc97e55f3b8a1e37cc2946aff750b", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap,cache=none,\x00']) creat(&(0x7f0000000000)='./file1\x00', 0x5d) r4 = fork() r5 = syz_init_net_socket$bt_l2cap(0x1f, 0xd2ff56a67e10fa6d, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x3, 0xc, 0x1, {0x0, 0x0, r2}}, 0xfffffff7) lseek(r0, 0x9, 0x4) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r6 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r6, &(0x7f0000000040)=""/55, 0x37, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, 0x13, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x40000) 05:40:13 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x7000000) 05:40:27 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 05:40:27 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:40:27 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0xa000000) 05:40:27 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:40:27 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 77) 05:40:27 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans-fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=none,\x00']) r3 = fork() ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@mcast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xffffffffffffff0d) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x1000401, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}, {@cache_mmap}, {@loose}, {@access_client}], [{@permit_directio}, {@smackfsdef}, {@fowner_eq={'fowner', 0x3d, r4}}, {@fsname={'fsname', 0x3d, '%{\\]!&'}}, {@euid_gt={'euid>', r5}}]}}) 05:40:27 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',of`no=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=none,\x00']) r3 = fork() ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:40:27 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4fec) [ 2551.748406] FAULT_INJECTION: forcing a failure. [ 2551.748406] name failslab, interval 1, probability 0, space 0, times 0 [ 2551.750956] CPU: 0 PID: 42457 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2551.752501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2551.754339] Call Trace: [ 2551.754929] dump_stack+0x107/0x167 [ 2551.755744] should_fail.cold+0x5/0xa [ 2551.756599] ? alloc_pid+0xd7/0xd30 [ 2551.757402] should_failslab+0x5/0x20 [ 2551.758247] kmem_cache_alloc+0x5b/0x310 [ 2551.759149] alloc_pid+0xd7/0xd30 [ 2551.759919] ? copy_namespaces+0x1ca/0x4f0 [ 2551.760851] copy_process+0x3b87/0x78b0 [ 2551.761722] ? stack_trace_save+0x8c/0xc0 [ 2551.762638] ? stack_trace_consume_entry+0x160/0x160 [ 2551.763762] ? __cleanup_sighand+0xb0/0xb0 [ 2551.764697] ? do_syscall_64+0x33/0x40 [ 2551.765543] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2551.766694] ? lock_acquire+0x197/0x470 [ 2551.767575] ? create_object.isra.0+0x3ad/0xa20 [ 2551.768621] ? lock_release+0x680/0x680 [ 2551.769498] ? find_held_lock+0x2c/0x110 [ 2551.770386] ? io_wqe_dec_running+0x220/0x220 [ 2551.771367] create_io_thread+0xb6/0xf0 [ 2551.772240] ? pidfd_prepare+0x80/0x80 [ 2551.773075] ? mark_held_locks+0x9e/0xe0 [ 2551.773962] ? io_wqe_dec_running+0x220/0x220 [ 2551.774946] ? __init_swait_queue_head+0xc6/0x150 [ 2551.775990] create_io_worker+0x23a/0x690 [ 2551.776887] io_wqe_enqueue+0x69e/0xbe0 [ 2551.777749] ? create_worker_cb+0x260/0x260 [ 2551.778693] ? io_prep_async_work+0x340/0x550 [ 2551.779662] io_queue_async_work+0x26b/0x4f0 [ 2551.780634] __io_queue_sqe+0x5cc/0x9d0 [ 2551.781503] ? io_issue_sqe+0x77b0/0x77b0 [ 2551.782404] ? __fget_files+0x2f8/0x520 [ 2551.783286] io_submit_sqes+0x44aa/0x8610 [ 2551.784214] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2551.785283] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2551.786323] ? find_held_lock+0x2c/0x110 [ 2551.787202] ? io_submit_sqes+0x8610/0x8610 [ 2551.788143] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2551.789203] ? wait_for_completion_io+0x270/0x270 [ 2551.790246] ? rcu_read_lock_any_held+0x75/0xa0 [ 2551.791248] ? vfs_write+0x354/0xb10 [ 2551.792196] ? fput_many+0x2f/0x1a0 [ 2551.792959] ? ksys_write+0x1a9/0x260 [ 2551.793740] ? __ia32_sys_read+0xb0/0xb0 [ 2551.794601] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2551.795362] 9pnet: Insufficient options for proto=fd [ 2551.795687] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2551.797379] do_syscall_64+0x33/0x40 [ 2551.798148] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2551.799217] RIP: 0033:0x7f0c174efb19 [ 2551.799994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2551.803767] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2551.805372] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2551.806832] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2551.808308] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2551.809787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2551.811272] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 05:40:27 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4fed) 05:40:27 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x48000000) [ 2551.832569] FAULT_INJECTION: forcing a failure. [ 2551.832569] name failslab, interval 1, probability 0, space 0, times 0 [ 2551.834035] CPU: 1 PID: 42463 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2551.834836] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2551.835850] Call Trace: [ 2551.836180] dump_stack+0x107/0x167 [ 2551.836625] should_fail.cold+0x5/0xa [ 2551.837087] ? copy_process+0x5e5/0x78b0 [ 2551.837586] should_failslab+0x5/0x20 [ 2551.838052] kmem_cache_alloc_node+0x55/0x330 [ 2551.838574] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2551.839188] copy_process+0x5e5/0x78b0 [ 2551.839669] ? stack_trace_save+0x8c/0xc0 [ 2551.840177] ? stack_trace_consume_entry+0x160/0x160 [ 2551.840803] ? kasan_save_stack+0x32/0x40 [ 2551.841278] ? __cleanup_sighand+0xb0/0xb0 [ 2551.841759] ? do_syscall_64+0x33/0x40 [ 2551.842223] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2551.842840] ? lock_acquire+0x197/0x470 [ 2551.843296] ? create_object.isra.0+0x3ad/0xa20 [ 2551.843863] ? lock_release+0x680/0x680 [ 2551.844322] ? find_held_lock+0x2c/0x110 [ 2551.844788] ? io_wqe_dec_running+0x220/0x220 [ 2551.845302] create_io_thread+0xb6/0xf0 [ 2551.845753] ? pidfd_prepare+0x80/0x80 [ 2551.846199] ? mark_held_locks+0x9e/0xe0 [ 2551.846664] ? io_wqe_dec_running+0x220/0x220 [ 2551.847193] ? __init_swait_queue_head+0xc6/0x150 [ 2551.847745] create_io_worker+0x23a/0x690 [ 2551.848253] io_wqe_enqueue+0x69e/0xbe0 [ 2551.848737] ? create_worker_cb+0x260/0x260 [ 2551.849232] ? io_prep_async_work+0x340/0x550 [ 2551.849750] io_queue_async_work+0x26b/0x4f0 [ 2551.850258] __io_queue_sqe+0x5cc/0x9d0 [ 2551.850717] ? io_issue_sqe+0x77b0/0x77b0 [ 2551.851217] ? __fget_files+0x2f8/0x520 [ 2551.851701] io_submit_sqes+0x44aa/0x8610 [ 2551.852220] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2551.852793] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2551.853345] ? find_held_lock+0x2c/0x110 [ 2551.853817] ? io_submit_sqes+0x8610/0x8610 [ 2551.854336] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2551.854895] ? wait_for_completion_io+0x270/0x270 [ 2551.855463] ? rcu_read_lock_any_held+0x75/0xa0 [ 2551.856006] ? vfs_write+0x354/0xb10 [ 2551.856431] ? fput_many+0x2f/0x1a0 [ 2551.856846] ? ksys_write+0x1a9/0x260 [ 2551.857305] ? __ia32_sys_read+0xb0/0xb0 [ 2551.857768] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2551.858362] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2551.858949] do_syscall_64+0x33/0x40 [ 2551.859374] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2551.859962] RIP: 0033:0x7f0bbbb8ab19 [ 2551.860387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2551.862499] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2551.863362] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2551.864178] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2551.864984] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2551.865797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2551.866633] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:40:27 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x4c000000) 05:40:27 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x68000000) 05:40:27 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="fcffffffffffffff000000000000d9bbc7a7681c3a408c3019173c0e1ed518c845dee7745e2c9b80e62cf5e1ffe999b25714acc8d4707f7bf7ff48153695d954198dc21ccd886d5924d31660e0778d52f7fccb44f818343a0d42f8203b0a3017277e3151eed967af48e986d7ac3faee0fa28f97dd45a3256c58889b405b9d094969bc0735c339cb2177c1f20a02c0f556d9d0fca6af71249c3c52b2d2bdd346ed2d0"], 0x18}}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='statm\x00') pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r4 = fork() ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:40:28 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:40:28 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 78) 05:40:28 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4fee) [ 2552.183628] FAULT_INJECTION: forcing a failure. [ 2552.183628] name failslab, interval 1, probability 0, space 0, times 0 [ 2552.186337] CPU: 0 PID: 42908 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2552.187791] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2552.189556] Call Trace: [ 2552.190133] dump_stack+0x107/0x167 [ 2552.190895] should_fail.cold+0x5/0xa [ 2552.191688] ? create_object.isra.0+0x3a/0xa20 [ 2552.192658] should_failslab+0x5/0x20 [ 2552.193463] kmem_cache_alloc+0x5b/0x310 [ 2552.194330] ? mark_held_locks+0x9e/0xe0 [ 2552.195201] create_object.isra.0+0x3a/0xa20 [ 2552.196146] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2552.197214] kmem_cache_alloc_bulk+0x168/0x320 [ 2552.198193] io_submit_sqes+0x6fe6/0x8610 [ 2552.199103] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2552.200163] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2552.201194] ? find_held_lock+0x2c/0x110 [ 2552.202065] ? io_submit_sqes+0x8610/0x8610 [ 2552.202990] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2552.204019] ? wait_for_completion_io+0x270/0x270 [ 2552.205045] ? rcu_read_lock_any_held+0x75/0xa0 [ 2552.206041] ? vfs_write+0x354/0xb10 [ 2552.206823] ? fput_many+0x2f/0x1a0 [ 2552.207600] ? ksys_write+0x1a9/0x260 [ 2552.208432] ? __ia32_sys_read+0xb0/0xb0 [ 2552.209304] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2552.210407] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2552.211498] do_syscall_64+0x33/0x40 [ 2552.212301] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2552.213380] RIP: 0033:0x7f0bbbb8ab19 [ 2552.214169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2552.218130] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2552.219783] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2552.221319] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2552.222873] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2552.224399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2552.225903] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 [ 2573.507326] FAULT_INJECTION: forcing a failure. [ 2573.507326] name failslab, interval 1, probability 0, space 0, times 0 [ 2573.508939] CPU: 1 PID: 43030 Comm: syz-executor.5 Not tainted 5.10.239 #1 05:40:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:40:49 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xea4f) 05:40:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:40:49 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x6c000000) 05:40:49 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 05:40:49 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x847d, 0x0, 0x2, 0x269}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r6, &(0x7f0000000040)=""/55, 0x37, 0x0) [ 2573.510014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2573.511226] Call Trace: [ 2573.511548] dump_stack+0x107/0x167 [ 2573.511988] should_fail.cold+0x5/0xa [ 2573.512457] ? create_object.isra.0+0x3a/0xa20 [ 2573.513001] should_failslab+0x5/0x20 [ 2573.513454] kmem_cache_alloc+0x5b/0x310 [ 2573.513939] create_object.isra.0+0x3a/0xa20 [ 2573.514459] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2573.515070] kmem_cache_alloc+0x159/0x310 [ 2573.515564] alloc_pid+0xd7/0xd30 [ 2573.515977] ? copy_namespaces+0x1ca/0x4f0 [ 2573.516493] copy_process+0x3b87/0x78b0 [ 2573.516967] ? stack_trace_save+0x8c/0xc0 [ 2573.517463] ? stack_trace_consume_entry+0x160/0x160 [ 2573.518073] ? __cleanup_sighand+0xb0/0xb0 [ 2573.518574] ? do_syscall_64+0x33/0x40 [ 2573.519036] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2573.519670] ? lock_acquire+0x197/0x470 [ 2573.520149] ? create_object.isra.0+0x3ad/0xa20 [ 2573.520707] ? lock_release+0x680/0x680 [ 2573.521177] ? find_held_lock+0x2c/0x110 [ 2573.521663] ? io_wqe_dec_running+0x220/0x220 [ 2573.522192] create_io_thread+0xb6/0xf0 [ 2573.522667] ? pidfd_prepare+0x80/0x80 [ 2573.523127] ? mark_held_locks+0x9e/0xe0 [ 2573.523615] ? io_wqe_dec_running+0x220/0x220 [ 2573.524161] ? __init_swait_queue_head+0xc6/0x150 [ 2573.524732] create_io_worker+0x23a/0x690 [ 2573.525228] io_wqe_enqueue+0x69e/0xbe0 [ 2573.525700] ? create_worker_cb+0x260/0x260 [ 2573.526214] ? io_prep_async_work+0x340/0x550 [ 2573.526749] io_queue_async_work+0x26b/0x4f0 [ 2573.527273] __io_queue_sqe+0x5cc/0x9d0 [ 2573.527748] ? io_issue_sqe+0x77b0/0x77b0 [ 2573.528243] ? __fget_files+0x2f8/0x520 [ 2573.528723] io_submit_sqes+0x44aa/0x8610 [ 2573.529232] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2573.529821] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2573.530395] ? find_held_lock+0x2c/0x110 [ 2573.530879] ? io_submit_sqes+0x8610/0x8610 [ 2573.531393] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2573.531966] ? wait_for_completion_io+0x270/0x270 [ 2573.532544] ? rcu_read_lock_any_held+0x75/0xa0 [ 2573.533092] ? vfs_write+0x354/0xb10 [ 2573.533531] ? fput_many+0x2f/0x1a0 [ 2573.533963] ? ksys_write+0x1a9/0x260 [ 2573.534411] ? __ia32_sys_read+0xb0/0xb0 [ 2573.534895] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2573.535518] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2573.536132] do_syscall_64+0x33/0x40 [ 2573.536568] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2573.537170] RIP: 0033:0x7f0c174efb19 [ 2573.537473] FAULT_INJECTION: forcing a failure. [ 2573.537473] name failslab, interval 1, probability 0, space 0, times 0 [ 2573.537609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2573.537623] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2573.543290] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2573.544135] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2573.544975] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2573.545813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2573.546657] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 [ 2573.547525] CPU: 0 PID: 43035 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2573.549210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2573.551184] Call Trace: [ 2573.551807] dump_stack+0x107/0x167 [ 2573.552679] should_fail.cold+0x5/0xa [ 2573.553586] ? create_object.isra.0+0x3a/0xa20 [ 2573.554674] should_failslab+0x5/0x20 [ 2573.555573] kmem_cache_alloc+0x5b/0x310 [ 2573.556590] ? mark_held_locks+0x9e/0xe0 [ 2573.557557] create_object.isra.0+0x3a/0xa20 [ 2573.558590] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2573.559808] kmem_cache_alloc_bulk+0x168/0x320 [ 2573.560905] io_submit_sqes+0x6fe6/0x8610 [ 2573.561922] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2573.563095] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2573.564244] ? find_held_lock+0x2c/0x110 [ 2573.565200] ? io_submit_sqes+0x8610/0x8610 [ 2573.566228] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2573.567361] ? wait_for_completion_io+0x270/0x270 [ 2573.568510] ? rcu_read_lock_any_held+0x75/0xa0 [ 2573.569600] ? vfs_write+0x354/0xb10 [ 2573.570475] ? fput_many+0x2f/0x1a0 [ 2573.571324] ? ksys_write+0x1a9/0x260 [ 2573.572219] ? __ia32_sys_read+0xb0/0xb0 [ 2573.573182] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2573.574424] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2573.575628] do_syscall_64+0x33/0x40 [ 2573.576502] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2573.577692] RIP: 0033:0x7f0bbbb8ab19 [ 2573.578562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2573.582907] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2573.584702] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2573.586384] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2573.588051] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2573.589920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2573.591609] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 syz_io_uring_submit(r4, r0, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r6, 0x0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="3fb5e265e6a9a94828465bb699ac537a47a01b6db1b7f3521deb6fed8b4a322bec3c6809a49ccd011bf8ce26d9d3ea83c4aa18a4c6094aa301cd39343f17b37ad6cd5ef72195e8e946e3e303be69cc1993b69e", 0x53}, {&(0x7f0000002280)="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", 0x1000}, {&(0x7f0000000280)="5ba58425415a1291ce4ce3ad4bc2d9420bf5143b476954eb17875b7cbdfc7ff83f1c7dd7ba2a58a851797c7c804c15a1536f0f074c3f1208a996d595eb849e6ed96cd3687eb6150de09f40e06e9025644a5cbb69eb6ab1e5aae31943a73f808340ce7199626fb6d906e2326d72897663a9ed392e9dc162006bd14693085239b1215c7c06fb934d6cb323978c2b7f01be40ba30283e5d11", 0x97}, {&(0x7f0000000000)="31aba7341bf0f47d37c780f5924e9e97060b432aecdf44e31f7de516e1488876d59381d6456f599a2556ef59502310dd1a660ee5a775eecc83", 0x39}, {&(0x7f0000000500)="f42c275c6724830bb62c489ff7f1bde84e04538de004466382686d3b874f528c0f014bfce0db96f792bbe8916e0605747df9097c0751b7787e69cdb90074046bf72038beb7de60c06d5cf24d44ece606893c2c88309d43e508c7fb0780621cd2ba56757cdbb5ebae8595aa4001b4a69ab0e87c5e74b5dd71e044fa18e9a953d2db", 0x81}, {&(0x7f0000000600)="b189f873f36fcd2eb973791c2f6534188484535bc921cf579443e4ef275b12e2ca8bd5b663519c0e389f2832b8cc0b950693480e8f32e207a61432e35e1227f5e1174ce00ef901e9d85b3bf01217e79ec2d8b3a30aadb6d8e10b5f4f41dd00f37a3182972dd438bee128cd64fb06ab7d2dbd91ee43ef4e0631827d53b627a70e26d7df", 0x83}, {&(0x7f00000006c0)="2b83cbb5146b54d1704c2f1b416cc5b5dbe12d5eabdb6a25c75c04b74268652ad2da6046611b7b72eb4b79cf3b218b721a82239c5f6f55dbb00d2a6df71673073f4234715711a2683a6c40629640fbed35d6f2f0c37fd0df1b1b8553410ddaddc3a3c704edb3447fe8bd9e604c6c33aa1d399646f776476ffa269150a121093ce97f3e2a036664a9141e31fc4bd1b6fe65e26900dccd0846ed8f944180", 0x9d}], 0x7, &(0x7f00000043c0)=ANY=[@ANYBLOB="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"], 0x1108}, 0x0, 0x20000000}, 0xad) r7 = fork() ptrace$getregset(0x4204, r7, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:40:49 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 79) 05:40:49 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:40:49 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 05:40:49 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x74000000) [ 2573.658776] FAULT_INJECTION: forcing a failure. [ 2573.658776] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2573.660338] CPU: 1 PID: 43076 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2573.661122] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2573.662064] Call Trace: [ 2573.662372] dump_stack+0x107/0x167 [ 2573.662784] should_fail.cold+0x5/0xa [ 2573.663220] __alloc_pages_nodemask+0x182/0x600 [ 2573.663749] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2573.664444] alloc_pages_current+0x187/0x280 [ 2573.664943] allocate_slab+0x26f/0x380 [ 2573.665389] ___slab_alloc+0x470/0x700 [ 2573.665832] ? create_object.isra.0+0x3a/0xa20 [ 2573.666352] ? find_held_lock+0x2c/0x110 [ 2573.666816] ? create_object.isra.0+0x3a/0xa20 [ 2573.667332] ? kmem_cache_alloc+0x301/0x310 [ 2573.667820] ? create_object.isra.0+0x3a/0xa20 [ 2573.668347] kmem_cache_alloc+0x301/0x310 [ 2573.668825] create_object.isra.0+0x3a/0xa20 [ 2573.669323] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2573.669900] kmem_cache_alloc+0x159/0x310 [ 2573.670375] alloc_pid+0xd7/0xd30 [ 2573.670773] ? copy_namespaces+0x1ca/0x4f0 [ 2573.671255] copy_process+0x3b87/0x78b0 [ 2573.671711] ? stack_trace_save+0x8c/0xc0 [ 2573.672188] ? stack_trace_consume_entry+0x160/0x160 [ 2573.672772] ? __cleanup_sighand+0xb0/0xb0 [ 2573.673250] ? do_syscall_64+0x33/0x40 [ 2573.673692] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2573.674296] ? lock_acquire+0x197/0x470 [ 2573.674743] ? create_object.isra.0+0x3ad/0xa20 [ 2573.675274] ? lock_release+0x680/0x680 [ 2573.675723] ? find_held_lock+0x2c/0x110 [ 2573.676191] ? io_wqe_dec_running+0x220/0x220 [ 2573.676699] create_io_thread+0xb6/0xf0 [ 2573.677149] ? pidfd_prepare+0x80/0x80 [ 2573.677589] ? mark_held_locks+0x9e/0xe0 [ 2573.678049] ? io_wqe_dec_running+0x220/0x220 [ 2573.678564] ? __init_swait_queue_head+0xc6/0x150 [ 2573.679109] create_io_worker+0x23a/0x690 [ 2573.679577] io_wqe_enqueue+0x69e/0xbe0 [ 2573.680029] ? create_worker_cb+0x260/0x260 [ 2573.680523] ? io_prep_async_work+0x340/0x550 [ 2573.681034] io_queue_async_work+0x26b/0x4f0 [ 2573.681536] __io_queue_sqe+0x5cc/0x9d0 [ 2573.681989] ? io_issue_sqe+0x77b0/0x77b0 [ 2573.682456] ? __fget_files+0x2f8/0x520 [ 2573.682912] io_submit_sqes+0x44aa/0x8610 [ 2573.683395] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2573.683957] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2573.684517] ? io_submit_sqes+0x8610/0x8610 [ 2573.685005] ? recalibrate_cpu_khz+0x10/0x10 [ 2573.685502] ? ktime_get+0x158/0x1f0 [ 2573.685928] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2573.686413] ? clockevents_program_event+0x131/0x360 [ 2573.686990] ? tick_program_event+0xa8/0x140 [ 2573.687487] ? hrtimer_interrupt+0x771/0x9b0 [ 2573.687994] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2573.688590] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2573.689175] do_syscall_64+0x33/0x40 [ 2573.689597] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2573.690177] RIP: 0033:0x7f0c174efb19 [ 2573.690600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2573.692685] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2573.693543] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2573.694346] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2573.695150] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2573.695958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2573.696775] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 05:40:49 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x7a000000) 05:40:49 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x8000000000000) 05:40:49 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xec4f) 05:40:49 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x10000000000000) 05:40:49 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c5c630c8d8e2ae7891993f2d785347766646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=none,\x00']) r3 = fork() ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:40:49 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x100000000000000) [ 2573.954729] 9pnet: Insufficient options for proto=fd 05:41:04 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x200000000000000) 05:41:04 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:41:04 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:41:04 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) 05:41:04 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xed4f) 05:41:04 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 80) 05:41:04 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(r0, &(0x7f0000000000)='./file1\x00', 0x80) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r4 = fork() ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:41:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) [ 2588.660271] FAULT_INJECTION: forcing a failure. [ 2588.660271] name failslab, interval 1, probability 0, space 0, times 0 [ 2588.662165] CPU: 0 PID: 43497 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2588.663207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2588.664481] Call Trace: [ 2588.664893] dump_stack+0x107/0x167 [ 2588.665447] should_fail.cold+0x5/0xa [ 2588.666028] ? create_object.isra.0+0x3a/0xa20 [ 2588.666716] should_failslab+0x5/0x20 [ 2588.667289] kmem_cache_alloc+0x5b/0x310 [ 2588.667906] ? mark_held_locks+0x9e/0xe0 [ 2588.668542] create_object.isra.0+0x3a/0xa20 [ 2588.669204] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2588.669970] kmem_cache_alloc_bulk+0x168/0x320 [ 2588.670681] io_submit_sqes+0x6fe6/0x8610 [ 2588.671327] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2588.672101] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2588.672835] ? find_held_lock+0x2c/0x110 [ 2588.673477] ? io_submit_sqes+0x8610/0x8610 [ 2588.674138] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2588.674855] ? wait_for_completion_io+0x270/0x270 [ 2588.675582] ? rcu_read_lock_any_held+0x75/0xa0 [ 2588.676294] ? vfs_write+0x354/0xb10 [ 2588.676848] ? fput_many+0x2f/0x1a0 [ 2588.677393] ? ksys_write+0x1a9/0x260 [ 2588.677973] ? __ia32_sys_read+0xb0/0xb0 [ 2588.678586] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2588.679405] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2588.680172] do_syscall_64+0x33/0x40 [ 2588.680747] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2588.681518] RIP: 0033:0x7f0bbbb8ab19 [ 2588.682082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2588.684853] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2588.685994] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2588.687098] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2588.688214] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2588.689320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2588.690391] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 [ 2588.702875] FAULT_INJECTION: forcing a failure. [ 2588.702875] name failslab, interval 1, probability 0, space 0, times 0 [ 2588.704767] CPU: 0 PID: 43501 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2588.705798] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2588.707030] Call Trace: [ 2588.707431] dump_stack+0x107/0x167 [ 2588.707978] should_fail.cold+0x5/0xa [ 2588.708558] ? create_object.isra.0+0x3a/0xa20 [ 2588.709248] should_failslab+0x5/0x20 [ 2588.709844] kmem_cache_alloc+0x5b/0x310 [ 2588.710452] create_object.isra.0+0x3a/0xa20 [ 2588.711105] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2588.711876] kmem_cache_alloc+0x159/0x310 [ 2588.712516] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2588.713349] idr_get_free+0x4b5/0x8f0 [ 2588.713930] idr_alloc_u32+0x170/0x2d0 [ 2588.714516] ? __fprop_inc_percpu_max+0x130/0x130 [ 2588.715237] ? lock_acquire+0x197/0x470 [ 2588.715842] ? alloc_pid+0x491/0xd30 [ 2588.716434] idr_alloc_cyclic+0x102/0x230 [ 2588.717050] ? idr_alloc+0x130/0x130 [ 2588.717614] ? rwlock_bug.part.0+0x90/0x90 [ 2588.718268] alloc_pid+0x4fb/0xd30 [ 2588.718807] ? copy_namespaces+0x1ca/0x4f0 [ 2588.719435] copy_process+0x3b87/0x78b0 [ 2588.720033] ? stack_trace_save+0x8c/0xc0 [ 2588.720663] ? stack_trace_consume_entry+0x160/0x160 [ 2588.721448] ? __cleanup_sighand+0xb0/0xb0 [ 2588.722069] ? do_syscall_64+0x33/0x40 [ 2588.722656] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2588.723447] ? lock_acquire+0x197/0x470 [ 2588.724027] ? create_object.isra.0+0x3ad/0xa20 [ 2588.724734] ? lock_release+0x680/0x680 [ 2588.725326] ? find_held_lock+0x2c/0x110 [ 2588.725929] ? io_wqe_dec_running+0x220/0x220 [ 2588.726585] create_io_thread+0xb6/0xf0 [ 2588.727165] ? pidfd_prepare+0x80/0x80 [ 2588.727735] ? mark_held_locks+0x9e/0xe0 [ 2588.728342] ? io_wqe_dec_running+0x220/0x220 [ 2588.729023] ? __init_swait_queue_head+0xc6/0x150 [ 2588.729728] create_io_worker+0x23a/0x690 [ 2588.730337] io_wqe_enqueue+0x69e/0xbe0 [ 2588.730925] ? create_worker_cb+0x260/0x260 [ 2588.731558] ? io_prep_async_work+0x340/0x550 [ 2588.732222] io_queue_async_work+0x26b/0x4f0 [ 2588.732878] __io_queue_sqe+0x5cc/0x9d0 [ 2588.733461] ? io_issue_sqe+0x77b0/0x77b0 [ 2588.734069] ? __fget_files+0x2f8/0x520 [ 2588.734666] io_submit_sqes+0x44aa/0x8610 [ 2588.735292] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2588.736027] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2588.736737] ? find_held_lock+0x2c/0x110 [ 2588.737334] ? io_submit_sqes+0x8610/0x8610 [ 2588.737982] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2588.738685] ? wait_for_completion_io+0x270/0x270 [ 2588.739390] ? rcu_read_lock_any_held+0x75/0xa0 [ 2588.740066] ? vfs_write+0x354/0xb10 [ 2588.740621] ? fput_many+0x2f/0x1a0 [ 2588.741162] ? ksys_write+0x1a9/0x260 [ 2588.741716] ? __ia32_sys_read+0xb0/0xb0 [ 2588.742310] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2588.743082] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2588.743844] do_syscall_64+0x33/0x40 [ 2588.744402] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2588.745159] RIP: 0033:0x7f0c174efb19 [ 2588.745694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2588.748372] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2588.749468] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2588.750499] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2588.751535] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2588.752582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2588.753620] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 05:41:04 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x300000000000000) 05:41:04 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x400000000000000) 05:41:05 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 81) 05:41:05 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) 05:41:05 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x500000000000000) [ 2589.153590] FAULT_INJECTION: forcing a failure. [ 2589.153590] name failslab, interval 1, probability 0, space 0, times 0 [ 2589.155192] CPU: 0 PID: 43731 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2589.156189] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2589.157180] Call Trace: [ 2589.157563] dump_stack+0x107/0x167 [ 2589.158090] should_fail.cold+0x5/0xa [ 2589.158642] ? create_object.isra.0+0x3a/0xa20 [ 2589.159310] should_failslab+0x5/0x20 [ 2589.159853] kmem_cache_alloc+0x5b/0x310 [ 2589.160451] ? mark_held_locks+0x9e/0xe0 [ 2589.161035] create_object.isra.0+0x3a/0xa20 [ 2589.161657] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2589.162392] kmem_cache_alloc_bulk+0x168/0x320 [ 2589.163060] io_submit_sqes+0x6fe6/0x8610 [ 2589.163672] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2589.164402] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2589.165097] ? find_held_lock+0x2c/0x110 [ 2589.165683] ? io_submit_sqes+0x8610/0x8610 [ 2589.166311] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2589.167014] ? wait_for_completion_io+0x270/0x270 [ 2589.167720] ? rcu_read_lock_any_held+0x75/0xa0 [ 2589.168396] ? vfs_write+0x354/0xb10 [ 2589.168932] ? fput_many+0x2f/0x1a0 [ 2589.169454] ? ksys_write+0x1a9/0x260 [ 2589.169904] ? __ia32_sys_read+0xb0/0xb0 [ 2589.170489] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2589.171226] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2589.171964] do_syscall_64+0x33/0x40 [ 2589.172509] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2589.173237] RIP: 0033:0x7f0bbbb8ab19 [ 2589.173771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2589.176417] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2589.177524] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2589.178364] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2589.179388] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2589.180225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2589.181264] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:41:05 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) openat(r0, &(0x7f0000000100)='./file0\x00', 0x100, 0x120) r1 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r4, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="e97a5932ae9ace9f3b2c1751ab13bac7668dd2c8387a557d77af8eb64e4998944de3a4e8c00543a53d532816cdc35ee25495c6461c864151d934bdad01000080000000008ab952b09f6c419a542c881343a3c6032a9358ad73455ff2e41d8ece3372ee01f3ee517f229c82c4e0fbfdb05ea71499dbbda6b7f9e9a885e40d0779175f1a86805ec5d63ebdd246c3e1c7c4c52842109eb0f99080c24b8ae2119c9efc79cbac638af81e0b7fec30ddd41fa7e522071e5b27237690f7188e944d41cf501178a46dcdbcc392a2bf700293bf422608478a3fe4c05d2109736ab0d75218f96b04c75fe486936f521edc0ac5a14c839a0a53b25e7be2864e8eb2284a027102c50000cdd805e491", @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,cache=none,\x00']) fork() ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:41:05 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xee4f) [ 2589.222140] FAULT_INJECTION: forcing a failure. [ 2589.222140] name failslab, interval 1, probability 0, space 0, times 0 [ 2589.225086] CPU: 1 PID: 43734 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2589.226645] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2589.228520] Call Trace: [ 2589.229119] dump_stack+0x107/0x167 [ 2589.229941] should_fail.cold+0x5/0xa [ 2589.230799] ? create_object.isra.0+0x3a/0xa20 [ 2589.231834] should_failslab+0x5/0x20 [ 2589.232704] kmem_cache_alloc+0x5b/0x310 [ 2589.233618] ? mark_held_locks+0x9e/0xe0 [ 2589.234521] create_object.isra.0+0x3a/0xa20 [ 2589.235507] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2589.236646] kmem_cache_alloc_bulk+0x168/0x320 [ 2589.237662] io_submit_sqes+0x6fe6/0x8610 [ 2589.238609] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2589.239711] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2589.240789] ? find_held_lock+0x2c/0x110 [ 2589.241692] ? io_submit_sqes+0x8610/0x8610 [ 2589.242652] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2589.243718] ? wait_for_completion_io+0x270/0x270 [ 2589.244795] ? rcu_read_lock_any_held+0x75/0xa0 [ 2589.245820] ? vfs_write+0x354/0xb10 [ 2589.246642] ? fput_many+0x2f/0x1a0 [ 2589.247448] ? ksys_write+0x1a9/0x260 [ 2589.248301] ? __ia32_sys_read+0xb0/0xb0 [ 2589.249203] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2589.250362] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2589.251504] do_syscall_64+0x33/0x40 [ 2589.252345] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2589.253476] RIP: 0033:0x7f0c174efb19 [ 2589.254298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2589.258371] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2589.260052] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2589.261637] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2589.263214] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2589.264800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2589.266378] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 [ 2589.299510] 9pnet: Insufficient options for proto=fd 05:41:05 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x600000000000000) 05:41:22 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:41:22 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 82) 05:41:22 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x700000000000000) 05:41:22 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x2ff, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r5, @ANYBLOB="0ae934000270afb3cffb473f"], 0x28}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1cc, 0x1d, 0xc21, 0x0, 0x80000, {0x4, 0x0, 0x2}, [@nested={0x100, 0x11, 0x0, 0x1, [@generic="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"]}, @generic="2ef9b9d79bb827e8b023d973f9a9b317430606a5eb854dcf902b63643a28dfea2b84efeeb6dd5765d40299ce6e50190d9408877186bdf575b0c6c65b685d75e818361d6b1d17e3cf85df0b3de40dc1ec6c27fdc611b63c9c9d1c566dd4d417a0d86a6b907220885899fea9320188a414523d893995ae45cdc0276ce695fd4969066c7fe9dbabe7b9f1185eaa5447775b2f81f9484dc04a388b73b9313d8395bb5588a2d2d59aaee6064f9ea0235eebdd073e56f754222c96"]}, 0x1cc}}, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r6) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r7, 0x1, 0x191f0000000, 0x1}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r8, 0x100, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xadbc1beab362c9c4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r8, 0x400, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}}, 0x41) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', 0x0, 0x0, 0x0) 05:41:22 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x200000) 05:41:22 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) 05:41:22 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x9, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r3 = fork() ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:41:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) [ 2606.172227] FAULT_INJECTION: forcing a failure. [ 2606.172227] name failslab, interval 1, probability 0, space 0, times 0 [ 2606.174346] CPU: 1 PID: 43967 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2606.175510] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2606.176907] Call Trace: [ 2606.177353] dump_stack+0x107/0x167 [ 2606.177959] should_fail.cold+0x5/0xa [ 2606.178594] ? create_object.isra.0+0x3a/0xa20 [ 2606.179359] should_failslab+0x5/0x20 [ 2606.180004] kmem_cache_alloc+0x5b/0x310 [ 2606.180698] create_object.isra.0+0x3a/0xa20 [ 2606.181427] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2606.182277] kmem_cache_alloc_bulk+0x168/0x320 [ 2606.183049] io_submit_sqes+0x6fe6/0x8610 [ 2606.183762] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2606.184662] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2606.185473] ? find_held_lock+0x2c/0x110 [ 2606.186174] ? io_submit_sqes+0x8610/0x8610 [ 2606.186901] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2606.187701] ? wait_for_completion_io+0x270/0x270 [ 2606.188513] ? rcu_read_lock_any_held+0x75/0xa0 [ 2606.189284] ? vfs_write+0x354/0xb10 [ 2606.189908] ? fput_many+0x2f/0x1a0 [ 2606.190516] ? ksys_write+0x1a9/0x260 [ 2606.191152] ? __ia32_sys_read+0xb0/0xb0 [ 2606.191887] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2606.192828] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2606.193744] do_syscall_64+0x33/0x40 [ 2606.194398] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2606.195308] RIP: 0033:0x7f0c174efb19 [ 2606.195964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2606.197208] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2606.199224] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2606.199241] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2606.199250] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2606.199268] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2606.206246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2606.207497] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 [ 2606.215533] FAULT_INJECTION: forcing a failure. [ 2606.215533] name failslab, interval 1, probability 0, space 0, times 0 [ 2606.217773] CPU: 1 PID: 43969 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2606.219003] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2606.220466] Call Trace: [ 2606.220932] dump_stack+0x107/0x167 [ 2606.221583] should_fail.cold+0x5/0xa [ 2606.222251] ? create_object.isra.0+0x3a/0xa20 [ 2606.223073] should_failslab+0x5/0x20 [ 2606.223750] kmem_cache_alloc+0x5b/0x310 [ 2606.224477] ? mark_held_locks+0x9e/0xe0 [ 2606.225188] create_object.isra.0+0x3a/0xa20 [ 2606.225966] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2606.226858] kmem_cache_alloc_bulk+0x168/0x320 [ 2606.227668] io_submit_sqes+0x6fe6/0x8610 [ 2606.228421] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2606.229306] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2606.230162] ? find_held_lock+0x2c/0x110 [ 2606.230881] ? io_submit_sqes+0x8610/0x8610 [ 2606.231639] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2606.232492] ? wait_for_completion_io+0x270/0x270 [ 2606.233341] ? rcu_read_lock_any_held+0x75/0xa0 [ 2606.234151] ? vfs_write+0x354/0xb10 [ 2606.234799] ? fput_many+0x2f/0x1a0 [ 2606.235443] ? ksys_write+0x1a9/0x260 [ 2606.236112] ? __ia32_sys_read+0xb0/0xb0 [ 2606.236837] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2606.237753] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2606.238667] do_syscall_64+0x33/0x40 [ 2606.239313] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2606.240214] RIP: 0033:0x7f0bbbb8ab19 [ 2606.240872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2606.244077] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2606.245416] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2606.246667] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2606.247920] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2606.249176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2606.249453] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2606.250420] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:41:22 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0xa00000000000000) 05:41:22 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x4800000000000000) 05:41:22 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x400000) 05:41:22 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x4c00000000000000) 05:41:22 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 83) 05:41:22 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) [ 2606.574540] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2606.588055] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2606.609167] FAULT_INJECTION: forcing a failure. [ 2606.609167] name failslab, interval 1, probability 0, space 0, times 0 [ 2606.611075] CPU: 1 PID: 44227 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2606.612066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2606.613248] Call Trace: [ 2606.613657] dump_stack+0x107/0x167 [ 2606.614193] should_fail.cold+0x5/0xa [ 2606.614772] ? create_object.isra.0+0x3a/0xa20 [ 2606.615484] should_failslab+0x5/0x20 [ 2606.616042] kmem_cache_alloc+0x5b/0x310 [ 2606.616683] create_object.isra.0+0x3a/0xa20 [ 2606.617377] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2606.618129] kmem_cache_alloc_bulk+0x168/0x320 [ 2606.618797] io_submit_sqes+0x6fe6/0x8610 [ 2606.619427] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2606.619449] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2606.621275] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2606.622034] ? io_submit_sqes+0x8610/0x8610 [ 2606.622662] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2606.623323] ? finish_task_switch+0x126/0x5d0 [ 2606.623975] ? finish_task_switch+0xef/0x5d0 [ 2606.624625] ? __switch_to+0x572/0xf70 [ 2606.625205] ? __switch_to_asm+0x3a/0x60 [ 2606.625791] ? __switch_to_asm+0x34/0x60 [ 2606.626402] ? __schedule+0x82c/0x1ea0 [ 2606.626974] ? io_schedule_timeout+0x140/0x140 [ 2606.627637] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2606.628303] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2606.629115] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2606.629879] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2606.630628] do_syscall_64+0x33/0x40 [ 2606.631168] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2606.631920] RIP: 0033:0x7f0bbbb8ab19 [ 2606.632470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2606.635137] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2606.636231] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2606.637272] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2606.638301] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2606.639328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2606.640369] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:41:22 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x6800000000000000) [ 2606.694895] FAULT_INJECTION: forcing a failure. [ 2606.694895] name failslab, interval 1, probability 0, space 0, times 0 [ 2606.697827] CPU: 0 PID: 44311 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2606.699309] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2606.701094] Call Trace: [ 2606.701676] dump_stack+0x107/0x167 [ 2606.702464] should_fail.cold+0x5/0xa [ 2606.703289] ? create_object.isra.0+0x3a/0xa20 [ 2606.704285] should_failslab+0x5/0x20 [ 2606.705126] kmem_cache_alloc+0x5b/0x310 [ 2606.706009] ? mark_held_locks+0x9e/0xe0 [ 2606.706897] create_object.isra.0+0x3a/0xa20 [ 2606.707841] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2606.708950] kmem_cache_alloc_bulk+0x168/0x320 [ 2606.709949] io_submit_sqes+0x6fe6/0x8610 [ 2606.710869] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2606.711958] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2606.713006] ? find_held_lock+0x2c/0x110 [ 2606.713887] ? io_submit_sqes+0x8610/0x8610 [ 2606.714812] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2606.715850] ? wait_for_completion_io+0x270/0x270 [ 2606.716898] ? rcu_read_lock_any_held+0x75/0xa0 [ 2606.717882] ? vfs_write+0x354/0xb10 [ 2606.718678] ? fput_many+0x2f/0x1a0 [ 2606.719461] ? ksys_write+0x1a9/0x260 [ 2606.720278] ? __ia32_sys_read+0xb0/0xb0 [ 2606.721160] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2606.722288] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2606.723395] do_syscall_64+0x33/0x40 [ 2606.724193] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2606.725298] RIP: 0033:0x7f0c174efb19 [ 2606.726097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2606.730247] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2606.732114] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2606.733878] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2606.735631] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2606.737395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2606.739161] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 05:41:22 executing program 4: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r4, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cacheWmmap\fcache=none,\x00']) r5 = fork() r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000001240)={{0x1, 0x1, 0x18, r0}, '.\x00'}) sendmsg$nl_generic(r6, &(0x7f0000006b00)={0xfffffffffffffffc, 0x0, &(0x7f0000006ac0)={&(0x7f0000005440)={0x164c, 0x22, 0x10, 0x70bd28, 0x25dfdbfc, {0x11}, [@nested={0x16, 0x41, 0x0, 0x1, [@generic="70903db128c70fd993826a9ed9c42cfbd692"]}, @typed={0x8, 0x2d, 0x0, 0x0, @fd=r1}, @nested={0x21d, 0x2f, 0x0, 0x1, [@typed={0x14, 0x56, 0x0, 0x0, @ipv6=@remote}, @generic="793589d2f50c97a6ae7a8bc05308b8356c958e58b1a20264a0a09a97d822fbac48da11a899bfa5cf19aef2cdf314041bd1d790993322ca81e6b10f10c80472ce8261ec48c2411638884010ea4f4a9ebfc2", @generic="6e3bd35c6c0cb93b3a95b1656a6699f373554bd5e76371bb0793781e0221aa5b242dbe1274ab01990688bfce8252f96dee3a20061f507e8e0ceff3d31286e86520541edd930d73889d27489ed9f29af64bca5df29e1698f2dba17787ca4ac10ccc1c18cc3c1471c37425258907d588f17222ced3d946b7f1a4726ead8f125eac13f93c3ead92496fcb5575de267dfc60b6e940ff5cd28a0a0aee35c7b1dd6055018709b394801a37ad7cfa0de473304f5905d6fccfb3a7f691f9aa00", @generic="f7f9f01f57a816f96f30cd4329669a8dcb501295768a14a8a595b83ac2fc676f0818f7e3134a6ef54963de4d7c729e91ca5ab9b87d581c938c2138b6e3922c14", @generic="f6004286488ec073199452a1a53c5b48e355382a80eb43f78d0b49304665ac302170d45cc0e94d5d1d442eb023f051866b8aff7d55abe4b29390c3b186a636e5f3100591fb5b5f10ed20770f8421a5bd7e048f87bdc95542338c2e59fa3969ce9ac7f75455cc86731129df0791e4043e444032cbc74624c7c5f034e6119ac776cf1b8cb81cd90d729f63701911b00fb3edc9dbf5c5242f1384e78fdca92e406e301bbba7cae37243a6c3c75567a8e091fb496229bc5060f5"]}, @nested={0x11e1, 0x4c, 0x0, 0x1, [@generic="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", @generic="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", @generic="fa0b9596ce9fb7687499bd2716e09c3524e97ebc4ee6ab7858a74b821933470e4c9f9f2c7dde94ed5936a0db8cc62fae788cb203c42f5cdbded66332a015ab691128232087f76721cfd81a99870bea8f681608692d313e083f88f9130bc23d25f7cc641bff95db1acca6480da9125924f5e16071da13b2efad24d50ceb3be083befa1b1123df7fbb02f0bb95b5a301cb43cc015dd09850acfb9c267dbc57e41e80edd768fe6b249a1300134bcab2e8e346f40c2e8db1ac0ee982956e0343ab27563f82e689c1f6", @typed={0x8, 0x5b, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x8, 0x5d, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x64, 0x0, 0x0, @u32=0x4c}]}, @generic="cab5031b1551ef2e8574539e4655bbcbc5a43ed9c2a843d9a0612978f3f6104c16f108010335792c0330540039108024ab65171b9abadc1f662c2a76d0f4ae5552ae8022e36204e903a668bf6387a44417dccad3f0936ed87f2a3233ea86f6085fca06cbe9b7f90bf6aa2b81f9ec964afc85e854b57ea51da5869035000fc5aa1ee2577f5a8a191adb45c80b114b0c4c136a2888ac5f2dce4f40d57809889c3b5edae6892b49d7333597f84680d47f15c6f6360664f1b9052fd68d8916ed5ee75123173eb4da49c694", @typed={0x8, 0x1d, 0x0, 0x0, @fd=r7}, @generic="4cd9704ea658d2503dd33824ada8ad3aa217720822f18aec00e228cd772f7c03c189bc76f6d95d4caf5821add28a2cfd43b97ee121ecf2a1a291ff636e325f118f8f90b692f2afc3474dfe663a53fa87e10af0045bbd2b95eeac99b63f2d78a17125d3a0b70fed6facd0a9774c4e4e9e4fac739972a7fbe2713c51481387bb1bf2de8654b1953051b3422d45b441fae2e99bb26632496bff5346621dfc2fbe3e37d1e51baeb766f8f03f776821bcb41e75378ab07f1480fca66ad95c83f4170451664313bb695216bb2fab0409befa76e12a11369b400b85ab77e3379c6f1254c8b295f15267c9f6eb69ce1e2066210a4c90e8a51d5eb5889d", @generic="24a487d5b3c7a4757a774c9c190ca37e40dc5fd3e624416fbacbf2e650511e03d6968cf32faf4600b9cf00746f95512b102357d343446f4537edfa940da3ed6eeadc9540b6e8d9"]}, 0x164c}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) fchdir(r6) r8 = syz_io_uring_complete(0x0) recvmmsg$unix(r8, &(0x7f0000005280)=[{{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000000)=""/24, 0x18}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000380)=""/56, 0x38}], 0x1, &(0x7f0000000600)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000740)=""/234, 0xea}, {&(0x7f0000000440)=""/7, 0x7}], 0x2, &(0x7f0000000840)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x70}}, {{&(0x7f0000000940), 0x6e, &(0x7f0000000b00)=[{&(0x7f00000009c0)=""/49, 0x31}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/184, 0xb8}, {&(0x7f0000000ac0)=""/37, 0x25}], 0x5, &(0x7f0000000b80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000004280)=""/4096, 0x1000}], 0x1, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000cc0)=""/47, 0x2f}, {&(0x7f0000000d00)=""/200, 0xc8}, {&(0x7f0000000e00)=""/239, 0xef}, {&(0x7f0000000f00)=""/171, 0xab}], 0x4, &(0x7f0000001000)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001080), 0x6e, &(0x7f0000001100), 0x0, &(0x7f0000001140)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}], 0x7, 0x40000100, 0x0) pread64(r9, &(0x7f00000011c0)=""/113, 0x71, 0x7) fsmount(r8, 0x1, 0x88) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:41:38 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000) 05:41:38 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) r1 = fsopen(&(0x7f0000000000)='bfs\x00', 0x0) sendfile(r1, r0, &(0x7f0000000100)=0x100, 0x1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r4, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'hsr0\x00'}) r6 = fork() pipe(&(0x7f0000000200)) ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:41:38 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={0x0, 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:41:38 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 05:41:38 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x6c00000000000000) 05:41:38 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 84) 05:41:38 executing program 6: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="240000001000010000000001040000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2940469067f0885d62e0b33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db0ac3a25ca5c1ff5a7d310a614982b1fd40000481b093286f835906fe8bc4907e6b5975ba7d712426b15c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187f86628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855b5ebf1edf10e03337ab01cd5cf01d1008cd602945245e9f6556ff73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb6434adf26a0fb6992406d5b482dba17a60975e1b30a0d1a42fff5c549c4e0da326b228260c04e0c5c189ba5a5cd936bc108903011ce4a250c26a97e1506f412703fc44bf1e2c8e06f3e77ce928189fc82d0f330af2658422c59fd0d1cd394e217c90bc55bfae57d609d54b707ca0accaebf7e06b81b9f2e3a2082d7b62e2c7f78f3d3ed4532e9735c427d8905609694e58447240bdbbba4802d31f19b8c82c30d8d68925e76669e38c7e9bff03dfb63bdb712086d8e7fd2a122780f12ec28518ef7c7917e377c2838f552dbc7d8f82cf8bee0f5ebbdf56e1004b"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x38) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000280)={&(0x7f0000000040), 0x0, 0x3, 0x100}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x4004, @fd=r6, 0x5, 0x401, 0x80000000, 0x22, 0x1, {0x1}}, 0x20000000) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendto(r1, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 05:41:38 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) [ 2622.548586] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2622.572681] FAULT_INJECTION: forcing a failure. [ 2622.572681] name failslab, interval 1, probability 0, space 0, times 0 [ 2622.575266] CPU: 1 PID: 44441 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2622.576750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2622.578508] Call Trace: [ 2622.579077] dump_stack+0x107/0x167 [ 2622.579861] should_fail.cold+0x5/0xa [ 2622.580678] ? create_object.isra.0+0x3a/0xa20 [ 2622.581649] should_failslab+0x5/0x20 [ 2622.582460] kmem_cache_alloc+0x5b/0x310 [ 2622.583333] ? mark_held_locks+0x9e/0xe0 [ 2622.583531] FAULT_INJECTION: forcing a failure. [ 2622.583531] name failslab, interval 1, probability 0, space 0, times 0 [ 2622.584194] create_object.isra.0+0x3a/0xa20 [ 2622.584211] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2622.584238] kmem_cache_alloc_bulk+0x168/0x320 [ 2622.584264] io_submit_sqes+0x6fe6/0x8610 [ 2622.584314] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2622.591731] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2622.592779] ? find_held_lock+0x2c/0x110 [ 2622.593648] ? io_submit_sqes+0x8610/0x8610 [ 2622.594563] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2622.595591] ? wait_for_completion_io+0x270/0x270 [ 2622.596614] ? rcu_read_lock_any_held+0x75/0xa0 [ 2622.597615] ? vfs_write+0x354/0xb10 [ 2622.598405] ? fput_many+0x2f/0x1a0 [ 2622.599180] ? ksys_write+0x1a9/0x260 [ 2622.599987] ? __ia32_sys_read+0xb0/0xb0 [ 2622.600862] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2622.601976] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2622.603071] do_syscall_64+0x33/0x40 [ 2622.603861] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2622.604963] RIP: 0033:0x7f0c174efb19 [ 2622.605754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2622.609678] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2622.611298] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2622.612816] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2622.614331] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2622.615865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2622.617389] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 [ 2622.618952] CPU: 0 PID: 44442 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2622.620591] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2622.622592] Call Trace: [ 2622.623215] dump_stack+0x107/0x167 [ 2622.624058] should_fail.cold+0x5/0xa [ 2622.624951] ? copy_process+0x5e5/0x78b0 [ 2622.625872] should_failslab+0x5/0x20 [ 2622.626803] kmem_cache_alloc_node+0x55/0x330 [ 2622.627841] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2622.629062] copy_process+0x5e5/0x78b0 [ 2622.629967] ? stack_trace_save+0x8c/0xc0 [ 2622.630947] ? stack_trace_consume_entry+0x160/0x160 [ 2622.632145] ? kasan_save_stack+0x32/0x40 [ 2622.633090] ? __cleanup_sighand+0xb0/0xb0 [ 2622.634034] ? do_syscall_64+0x33/0x40 [ 2622.634907] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2622.636118] ? lock_acquire+0x197/0x470 [ 2622.637030] ? create_object.isra.0+0x3ad/0xa20 [ 2622.638098] ? lock_release+0x680/0x680 [ 2622.639042] ? find_held_lock+0x2c/0x110 [ 2622.640039] ? io_wqe_dec_running+0x220/0x220 [ 2622.641083] create_io_thread+0xb6/0xf0 [ 2622.642003] ? pidfd_prepare+0x80/0x80 [ 2622.642893] ? mark_held_locks+0x9e/0xe0 [ 2622.643825] ? io_wqe_dec_running+0x220/0x220 [ 2622.644943] ? __init_swait_queue_head+0xc6/0x150 [ 2622.646045] create_io_worker+0x23a/0x690 [ 2622.647000] io_wqe_enqueue+0x69e/0xbe0 [ 2622.647918] ? create_worker_cb+0x260/0x260 [ 2622.648969] ? io_prep_async_work+0x340/0x550 [ 2622.650035] io_queue_async_work+0x26b/0x4f0 [ 2622.651053] __io_queue_sqe+0x5cc/0x9d0 [ 2622.651978] ? io_issue_sqe+0x77b0/0x77b0 [ 2622.652936] ? __fget_files+0x2f8/0x520 [ 2622.653880] io_submit_sqes+0x44aa/0x8610 [ 2622.654846] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2622.656054] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2622.657184] ? find_held_lock+0x2c/0x110 [ 2622.658120] ? io_submit_sqes+0x8610/0x8610 [ 2622.659108] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2622.660213] ? wait_for_completion_io+0x270/0x270 [ 2622.661401] ? rcu_read_lock_any_held+0x75/0xa0 [ 2622.662472] ? vfs_write+0x354/0xb10 [ 2622.663317] ? fput_many+0x2f/0x1a0 [ 2622.664147] ? ksys_write+0x1a9/0x260 [ 2622.665101] ? __ia32_sys_read+0xb0/0xb0 [ 2622.666032] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2622.667218] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2622.668399] do_syscall_64+0x33/0x40 [ 2622.669251] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2622.670491] RIP: 0033:0x7f0bbbb8ab19 [ 2622.671344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2622.675643] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2622.677374] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2622.679063] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2622.680688] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2622.682313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2622.683933] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:41:38 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x7400000000000000) [ 2622.750374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2622.751945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2622.753863] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2622.782377] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 05:41:38 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) 05:41:38 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x7a00000000000000) 05:41:38 executing program 4: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000100), 0x4018, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_loose}, {@access_uid={'access', 0x3d, r1}}, {@access_any}], [{@smackfsdef={'smackfsdef', 0x3d, '#[-{'}}, {@fowner_lt}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@euid_lt={'euid<', r2}}, {@smackfsdef={'smackfsdef', 0x3d, '@,*,'}}, {@obj_type={'obj_type', 0x3d, ' '}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x63, 0x61, 0x34, 0x36, 0x64, 0x62, 0x63], 0x2d, [0x62, 0x30, 0x61, 0xb], 0x2d, [0x38, 0x39, 0x32, 0x32], 0x2d, [0x61, 0x37, 0x62], 0x2d, [0x39, 0x65, 0x61, 0x62, 0x39, 0x63, 0x35, 0x65]}}}, {@appraise_type}, {@obj_type={'obj_type', 0x3d, '&%\'/&:]\'.*$/-\xcb.):\xc2\\'}}]}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r4, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r5 = fork() ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:41:38 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8000000) 05:41:38 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101050000000000000002"], 0x14}}, 0x0) recvmmsg$unix(r0, &(0x7f0000005980)=[{{0x0, 0xffffff68, 0x0}}], 0x4000167, 0x10041, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$unix(0x1, 0x6, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, 0x0) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)="d9ce4b46bf0f2c16e534b8", 0xb}, {&(0x7f0000000280)="e688a8", 0x3}, {&(0x7f0000000140)="5c939999", 0x4}], 0x3}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0xf451}}, './file0\x00'}) [ 2622.958681] FAULT_INJECTION: forcing a failure. [ 2622.958681] name failslab, interval 1, probability 0, space 0, times 0 [ 2622.961307] CPU: 0 PID: 44673 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2622.962798] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2622.964559] Call Trace: [ 2622.965144] dump_stack+0x107/0x167 [ 2622.965921] should_fail.cold+0x5/0xa [ 2622.966738] ? create_object.isra.0+0x3a/0xa20 [ 2622.967718] should_failslab+0x5/0x20 [ 2622.968528] kmem_cache_alloc+0x5b/0x310 [ 2622.969399] ? mark_held_locks+0x9e/0xe0 [ 2622.970260] create_object.isra.0+0x3a/0xa20 [ 2622.971185] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2622.972262] kmem_cache_alloc_bulk+0x168/0x320 [ 2622.973251] io_submit_sqes+0x6fe6/0x8610 [ 2622.974155] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2622.975212] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2622.976239] ? find_held_lock+0x2c/0x110 [ 2622.977117] ? io_submit_sqes+0x8610/0x8610 [ 2622.978048] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2622.979081] ? wait_for_completion_io+0x270/0x270 [ 2622.980106] ? rcu_read_lock_any_held+0x75/0xa0 [ 2622.981095] ? vfs_write+0x354/0xb10 [ 2622.981881] ? fput_many+0x2f/0x1a0 [ 2622.982652] ? ksys_write+0x1a9/0x260 [ 2622.983456] ? __ia32_sys_read+0xb0/0xb0 [ 2622.984319] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2622.985470] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2622.986580] do_syscall_64+0x33/0x40 [ 2622.987380] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2622.988475] RIP: 0033:0x7f0c174efb19 [ 2622.989273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2622.993197] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2622.994822] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2622.996337] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2622.997877] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2622.999396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2623.000921] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 05:41:39 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0xffffffff00000000) 05:41:39 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x40bc, &(0x7f0000000080)={0x0, 0x806cad, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x504}, 0x1, 0x0, 0x0, 0x20000080}, 0x48884) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x10001, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000900)={@in6={{0xa, 0x0, 0x0, @mcast1, 0xfffffffc}}, 0x0, 0x0, 0x33, 0x0, "4fb2386f65a856b6930930052d7d4e52fc4032fe98f268baabdf34269819ec36e44c87f906b59567acb1dd5aa5ba7be8ecc7069f172fddc076e97b1bb7ad34493270d4dbba4a2ca52cc13ca18e08c805"}, 0xd8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x51, 0x0, 0x0, 0x3ff, 0x1, 0x1}, 0x10000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x20d315) 05:41:39 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 85) 05:41:39 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) [ 2623.250666] FAULT_INJECTION: forcing a failure. [ 2623.250666] name failslab, interval 1, probability 0, space 0, times 0 [ 2623.253291] CPU: 0 PID: 44893 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2623.254766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2623.256519] Call Trace: [ 2623.257088] dump_stack+0x107/0x167 [ 2623.257857] should_fail.cold+0x5/0xa [ 2623.258662] ? create_object.isra.0+0x3a/0xa20 [ 2623.259622] should_failslab+0x5/0x20 [ 2623.260431] kmem_cache_alloc+0x5b/0x310 [ 2623.261306] ? mark_held_locks+0x9e/0xe0 [ 2623.262182] create_object.isra.0+0x3a/0xa20 [ 2623.263118] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2623.264200] kmem_cache_alloc_bulk+0x168/0x320 [ 2623.265182] io_submit_sqes+0x6fe6/0x8610 [ 2623.266099] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2623.267154] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2623.268183] ? find_held_lock+0x2c/0x110 [ 2623.269057] ? io_submit_sqes+0x8610/0x8610 [ 2623.269980] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2623.271008] ? wait_for_completion_io+0x270/0x270 [ 2623.272033] ? rcu_read_lock_any_held+0x75/0xa0 [ 2623.273022] ? vfs_write+0x354/0xb10 [ 2623.273810] ? fput_many+0x2f/0x1a0 [ 2623.274584] ? ksys_write+0x1a9/0x260 [ 2623.275394] ? __ia32_sys_read+0xb0/0xb0 [ 2623.276257] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2623.277371] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2623.278468] do_syscall_64+0x33/0x40 [ 2623.279260] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2623.280352] RIP: 0033:0x7f0bbbb8ab19 [ 2623.281177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2623.285125] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2623.286761] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2623.288299] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2623.289838] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2623.291374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2623.292908] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 [ 2639.636804] FAULT_INJECTION: forcing a failure. [ 2639.636804] name failslab, interval 1, probability 0, space 0, times 0 [ 2639.639394] CPU: 1 PID: 45012 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2639.640853] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2639.642621] Call Trace: [ 2639.643177] dump_stack+0x107/0x167 [ 2639.643943] should_fail.cold+0x5/0xa [ 2639.644749] ? create_object.isra.0+0x3a/0xa20 [ 2639.645697] should_failslab+0x5/0x20 [ 2639.646488] kmem_cache_alloc+0x5b/0x310 [ 2639.647337] ? mark_held_locks+0x9e/0xe0 [ 2639.648198] create_object.isra.0+0x3a/0xa20 [ 2639.649134] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2639.650206] kmem_cache_alloc_bulk+0x168/0x320 [ 2639.651176] io_submit_sqes+0x6fe6/0x8610 [ 2639.652079] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2639.653129] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2639.654136] ? find_held_lock+0x2c/0x110 [ 2639.654995] ? io_submit_sqes+0x8610/0x8610 [ 2639.655905] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2639.656919] ? wait_for_completion_io+0x270/0x270 [ 2639.657922] ? rcu_read_lock_any_held+0x75/0xa0 [ 2639.658884] ? vfs_write+0x354/0xb10 [ 2639.659657] ? fput_many+0x2f/0x1a0 [ 2639.660426] ? ksys_write+0x1a9/0x260 [ 2639.661243] ? __ia32_sys_read+0xb0/0xb0 [ 2639.662090] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2639.663203] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2639.664276] do_syscall_64+0x33/0x40 [ 2639.665068] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2639.666140] RIP: 0033:0x7f0bbbb8ab19 [ 2639.666916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2639.670757] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2639.672360] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2639.673861] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2639.675364] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2639.676896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2639.678410] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:41:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:41:55 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={0x0, 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:41:55 executing program 6: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001ec0)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000140)=[{&(0x7f0000000080)=""/189, 0xbd}], 0x1, &(0x7f0000000180)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000000280)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/47, 0x2f}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/230, 0xe6}, {&(0x7f0000000440)=""/125, 0x7d}], 0x4, &(0x7f0000000500)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000001700)=[{&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001740)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f00000017c0), 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001840)=""/97, 0x61}, {&(0x7f00000018c0)=""/103, 0x67}, {&(0x7f0000001940)=""/211, 0xd3}, {&(0x7f0000001a40)=""/122, 0x7a}, {&(0x7f0000001ac0)=""/222, 0xde}, {&(0x7f0000001bc0)=""/117, 0x75}, {&(0x7f0000001c40)=""/36, 0x24}, {&(0x7f0000001c80)=""/94, 0x5e}, {&(0x7f0000001d00)=""/137, 0x89}], 0x9, &(0x7f0000001e80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x4, 0x2000, &(0x7f0000001fc0)={0x0, 0x3938700}) unshare(0x28020600) semget$private(0x0, 0x4, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)=[0x8, 0x1, 0x1, 0x8]) semop(0x0, &(0x7f00000001c0)=[{0x0, 0x0, 0x800}, {0x0, 0x0, 0x1000}], 0x2) unshare(0x48020200) 05:41:55 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe6c02, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) 05:41:55 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x4, 0x8, 0x81, 0x0, 0x9, 0x61089, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffc6, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x80, 0x8, 0x8, 0xe, 0x1, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x7}, r4, 0x8, r2, 0x1) r5 = fork() ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:41:55 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) 05:41:55 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f000000) 05:41:55 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 86) [ 2639.734248] FAULT_INJECTION: forcing a failure. [ 2639.734248] name failslab, interval 1, probability 0, space 0, times 0 [ 2639.736791] CPU: 1 PID: 45024 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2639.738245] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2639.739937] Call Trace: [ 2639.740494] dump_stack+0x107/0x167 [ 2639.741272] should_fail.cold+0x5/0xa [ 2639.742065] ? create_object.isra.0+0x3a/0xa20 [ 2639.742998] should_failslab+0x5/0x20 [ 2639.743785] kmem_cache_alloc+0x5b/0x310 [ 2639.744625] ? mark_held_locks+0x9e/0xe0 [ 2639.745459] create_object.isra.0+0x3a/0xa20 [ 2639.746360] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2639.747392] kmem_cache_alloc_bulk+0x168/0x320 [ 2639.748342] io_submit_sqes+0x6fe6/0x8610 [ 2639.749232] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2639.750255] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2639.751251] ? find_held_lock+0x2c/0x110 [ 2639.752083] ? io_submit_sqes+0x8610/0x8610 [ 2639.752981] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2639.753968] ? wait_for_completion_io+0x270/0x270 [ 2639.754944] ? rcu_read_lock_any_held+0x75/0xa0 [ 2639.755910] ? vfs_write+0x354/0xb10 [ 2639.756670] ? fput_many+0x2f/0x1a0 [ 2639.757427] ? ksys_write+0x1a9/0x260 [ 2639.758205] ? __ia32_sys_read+0xb0/0xb0 [ 2639.759032] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2639.760115] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2639.761178] do_syscall_64+0x33/0x40 [ 2639.761947] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2639.763004] RIP: 0033:0x7f0c174efb19 [ 2639.763773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2639.767565] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2639.769131] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2639.770567] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2639.772035] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2639.773523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2639.774993] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 05:41:55 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') fcntl$setstatus(r0, 0x4, 0xa800) pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) 05:41:55 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x80, 0x40, 0x10}, 0x18) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/55, 0x37, 0x0) 05:41:55 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x44280000) 05:41:55 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[], 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 05:41:56 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = fork() ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/ip_mr_vif\x00') pread64(r1, &(0x7f0000000040)=""/55, 0x37, 0x0) [ 2640.062542] loop6: detected capacity change from 0 to 41948160 05:41:56 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) [ 2640.349580] FAULT_INJECTION: forcing a failure. [ 2640.349580] name failslab, interval 1, probability 0, space 0, times 0 [ 2640.352192] CPU: 0 PID: 45339 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2640.353681] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2640.355441] Call Trace: [ 2640.356011] dump_stack+0x107/0x167 [ 2640.356794] should_fail.cold+0x5/0xa [ 2640.357618] ? create_object.isra.0+0x3a/0xa20 [ 2640.358585] should_failslab+0x5/0x20 [ 2640.359390] kmem_cache_alloc+0x5b/0x310 [ 2640.360247] ? mark_held_locks+0x9e/0xe0 [ 2640.361117] create_object.isra.0+0x3a/0xa20 [ 2640.362042] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2640.363120] kmem_cache_alloc_bulk+0x168/0x320 [ 2640.364094] io_submit_sqes+0x6fe6/0x8610 [ 2640.365002] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2640.366057] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2640.367078] ? find_held_lock+0x2c/0x110 [ 2640.367944] ? io_submit_sqes+0x8610/0x8610 [ 2640.368869] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2640.369887] ? wait_for_completion_io+0x270/0x270 [ 2640.370907] ? rcu_read_lock_any_held+0x75/0xa0 [ 2640.371888] ? vfs_write+0x354/0xb10 [ 2640.372672] ? fput_many+0x2f/0x1a0 [ 2640.373453] ? ksys_write+0x1a9/0x260 [ 2640.374259] ? __ia32_sys_read+0xb0/0xb0 [ 2640.375128] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2640.376231] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2640.377337] do_syscall_64+0x33/0x40 [ 2640.378123] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2640.379205] RIP: 0033:0x7f0c174efb19 [ 2640.379992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2640.383894] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2640.385513] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2640.387018] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2640.388527] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2640.390051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2640.391570] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 05:41:56 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x45280000) 05:41:56 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x80000000, 0xd}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='tsans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c63616368653d6d6d61702c6b7abfd4"]) r3 = fork() ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:42:10 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) 05:42:10 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:42:10 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={0x0, 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:42:10 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 87) 05:42:10 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/55, 0x37, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000000), &(0x7f0000000200)=ANY=[@ANYBLOB="029320b433829816fa098d010094dcd053870dd169602a6d2267e9093cb879acffe1477701ccc8d93dc54b743e3f9f60cfef5b16079ca178b6f735adc2d169b7db6ac8ff0873368e44b16f889dabf576e175dae92afd9c9ae3a9fc667e2b8564ea00a46dcfcda2b3f568bce1251d38cb0472b6e007493a24bfea45b15416cf3f2d177a307cd676d9c2fb8fa25a1fe53d2824aa83b13e43c2a257e90c6c1f4622ee9d6f2854e3848507c881fb13037926abe07f053f3c94a88c731c6b2ee7ad9915e68b847f68b27e0fd2a4930068c63b8b58d206d4c5cbf77defb01db507c004c84276756e2a225814cbac8d2040995d79f330fd415d2e"], 0x14, 0x3) 05:42:10 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_io_uring_setup(0x4dcf, &(0x7f0000000080)={0x0, 0xfffffff9, 0x4, 0x0, 0x4000000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(r0, &(0x7f0000000100)='./file1\x00', 0x2000, 0x120) pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x12b000, 0x0) fcntl$setflags(r3, 0x2, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c63616368653d6d6d61702c63616368653d6e6f6e652c000c0ab631b4b4f92eab397517bf9cf8d3bc52d023055b9175d70ac7bd97d65da443afa5a9ab05d7fbcf76d1736183463bf474d0a05fa605d555376c6c4d50e4f574065d22505e86020d7426dd827fc88f6094486d7165ab19bcbf5701cf481d46344f10e359c0c1d997c8f07956f3eed4583bb5e5227775df31d2a68900f2cbbc26a69b33eead8cb2a4f4042e8cbabfff129026ff4a55009d056a6a770a156c58b7536b1ffd77ea17db69f7134c3b"]) r4 = fork() ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:42:10 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x46280000) 05:42:10 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x80000000, 0xd}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='tsans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c63616368653d6d6d61702c6b7abfd4"]) r3 = fork() ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) [ 2654.564559] FAULT_INJECTION: forcing a failure. [ 2654.564559] name failslab, interval 1, probability 0, space 0, times 0 [ 2654.567203] CPU: 0 PID: 45590 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2654.568702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2654.570502] Call Trace: [ 2654.571066] dump_stack+0x107/0x167 [ 2654.571866] should_fail.cold+0x5/0xa [ 2654.572682] ? create_object.isra.0+0x3a/0xa20 [ 2654.573550] FAULT_INJECTION: forcing a failure. [ 2654.573550] name failslab, interval 1, probability 0, space 0, times 0 [ 2654.573683] should_failslab+0x5/0x20 [ 2654.576891] kmem_cache_alloc+0x5b/0x310 [ 2654.577782] ? mark_held_locks+0x9e/0xe0 [ 2654.578656] create_object.isra.0+0x3a/0xa20 [ 2654.579584] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2654.580660] kmem_cache_alloc_bulk+0x168/0x320 [ 2654.581646] io_submit_sqes+0x6fe6/0x8610 [ 2654.582569] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2654.583628] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2654.584650] ? find_held_lock+0x2c/0x110 [ 2654.585539] ? io_submit_sqes+0x8610/0x8610 [ 2654.586480] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2654.587516] ? wait_for_completion_io+0x270/0x270 [ 2654.588550] ? rcu_read_lock_any_held+0x75/0xa0 [ 2654.589549] ? vfs_write+0x354/0xb10 [ 2654.590343] ? fput_many+0x2f/0x1a0 [ 2654.591126] ? ksys_write+0x1a9/0x260 [ 2654.591936] ? __ia32_sys_read+0xb0/0xb0 [ 2654.592809] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2654.593948] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2654.595050] do_syscall_64+0x33/0x40 [ 2654.595842] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2654.596930] RIP: 0033:0x7f0bbbb8ab19 [ 2654.597744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2654.601658] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2654.603290] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2654.604806] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2654.606334] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2654.607825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2654.609348] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 [ 2654.610924] CPU: 1 PID: 45603 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2654.612461] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2654.614261] Call Trace: [ 2654.614830] dump_stack+0x107/0x167 [ 2654.615626] should_fail.cold+0x5/0xa [ 2654.616453] ? create_object.isra.0+0x3a/0xa20 [ 2654.617457] should_failslab+0x5/0x20 [ 2654.618278] kmem_cache_alloc+0x5b/0x310 [ 2654.619140] ? mark_held_locks+0x9e/0xe0 [ 2654.620041] create_object.isra.0+0x3a/0xa20 [ 2654.620985] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2654.622097] kmem_cache_alloc_bulk+0x168/0x320 [ 2654.623099] io_submit_sqes+0x6fe6/0x8610 [ 2654.624035] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2654.625117] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2654.626164] ? find_held_lock+0x2c/0x110 [ 2654.627045] ? io_submit_sqes+0x8610/0x8610 [ 2654.627979] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2654.629029] ? wait_for_completion_io+0x270/0x270 [ 2654.630081] ? rcu_read_lock_any_held+0x75/0xa0 [ 2654.631078] ? vfs_write+0x354/0xb10 [ 2654.631879] ? fput_many+0x2f/0x1a0 [ 2654.632656] ? ksys_write+0x1a9/0x260 [ 2654.633488] ? __ia32_sys_read+0xb0/0xb0 [ 2654.634381] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2654.635519] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2654.636630] do_syscall_64+0x33/0x40 [ 2654.637451] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2654.638570] RIP: 0033:0x7f0c174efb19 [ 2654.639381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2654.643342] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2654.644971] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2654.646536] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2654.648082] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2654.649621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2654.651156] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 05:42:10 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x460200, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 05:42:10 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="4b7766702bcf4763e972da28029eefcef5ab0248cee7871fb7e6307c8c5535750c74ffbf1797c85cab5642ba806e704f51fbf698e99ff1c187eec9e08dadbe9aa2557aa4783befc0a2f670a33b17221e5f7ab6ea2fb92e138b2f21ecdccfcbba22219aa27368ba3a715d630a51e3b232c4571fba1d6bf933eaaa19d2784a3aefba544d4b48d11bce45024d10d4fe2ca69eb508eae52b602cad6f1c12dc8e1792e436fa6038247a340cabe214fd27eeca052e9aa91c12c87a30859c3807311e938cfe6b3e852751e254b7dff940478d", @ANYRESHEX=r2, @ANYBLOB=',cache=mmap,cache=none,\x00']) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40080208}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r4, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x10, 0x18, {0x9, @bearer=@l2={'ib', 0x3a, 'lo\x00'}}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x85) r5 = fork() ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:42:10 executing program 1: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x288001, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa4, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}]}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xc, 0x1a, 'net/hci\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/hci\x00') pread64(r1, &(0x7f0000000040)=""/55, 0x37, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000800)=""/133, 0x85}], 0x1, 0x3, 0x6) clone3(&(0x7f0000000500)={0xa00000, &(0x7f00000002c0)=0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340), {0x36}, &(0x7f0000000380)=""/148, 0x94, &(0x7f0000000440)=""/93, &(0x7f00000004c0)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000780)={0x1, 0x2, 0x1000, 0xac, &(0x7f0000000600)="49649b1c0bd37fdcdd852fdb72f453e6d49e10e08b333234494f8ffe98cc604445f0fc1992088c2edabff72610526ceec3043f2041810ef6f28975475eb5c6617e34b31d8000d1a4701abe741f1173b12f8436c30e61959f451af684775356c94a7556a7152979004b7b49dd26fbb217bc918d38226fe9c15022034cd61e89148aca37acd4b26200ecd7e2f3203e83ebe55203a42da9d9c59bee858ffc37b15ceb249f242a582b16cb3b4578", 0xb8, 0x0, &(0x7f00000006c0)="c005372900ff4aed102a679ef208da64af3706592a1c9b69928f0eb758d20cda8b156ca04fb641c2677e3d03c06e954ccf51883c1c2a52b377b01749d610a6d9b4ad8b5b15fdeca6cb8a6c37fb248f1cf4b01487dba5d7e57b0c3bd22d183aea3f10ea4b036e8d0b184f910cf33695c8a6176ec00a1b58f41f0be695ed41c0c225d4265ba1f4388c03be2f206f2f94314c027d8ccdb1b8b5cd228aa5ea81d3aa20017af4b64ad97c6bb360c001950b7a690be42912d86279"}) fdatasync(r3) r5 = openat$incfs(r0, &(0x7f0000000240)='.pending_reads\x00', 0x400100, 0x28) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000280)={'netdevsim0\x00'}) r6 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r6, &(0x7f0000000040)=""/55, 0x37, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@getsadinfo={0x2c, 0x23, 0x100, 0x70bd2c, 0x25dfdbfb, 0x0, [@mark={0xc, 0x15, {0x35075a}}, @lastused={0xc, 0xf, 0x7cb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40) 05:42:10 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x47280000) 05:42:10 executing program 6: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x46280000) [ 2654.883762] 9pnet: Insufficient options for proto=fd 05:42:11 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 05:42:11 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 88) 05:42:11 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x3, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x35, &(0x7f00000001c0)=0x7fffffff, 0x4) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x44084) fallocate(r2, 0x0, 0x10001, 0x100) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x40000) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x4, 0xffffffff, 0x1f, 0x4}) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9bbb) r4 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$FIOCLEX(r4, 0x5451) sendfile(0xffffffffffffffff, r4, &(0x7f0000000100)=0x4, 0x1) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) lseek(0xffffffffffffffff, 0x2, 0x4) 05:42:11 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe4ffffff) [ 2655.183625] FAULT_INJECTION: forcing a failure. [ 2655.183625] name failslab, interval 1, probability 0, space 0, times 0 [ 2655.186390] CPU: 0 PID: 46020 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2655.187852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2655.189600] Call Trace: [ 2655.190160] dump_stack+0x107/0x167 [ 2655.190934] should_fail.cold+0x5/0xa [ 2655.191737] ? create_object.isra.0+0x3a/0xa20 [ 2655.192695] should_failslab+0x5/0x20 [ 2655.193503] kmem_cache_alloc+0x5b/0x310 [ 2655.194369] ? mark_held_locks+0x9e/0xe0 [ 2655.195227] create_object.isra.0+0x3a/0xa20 [ 2655.196153] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2655.197238] kmem_cache_alloc_bulk+0x168/0x320 [ 2655.198211] io_submit_sqes+0x6fe6/0x8610 [ 2655.199124] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2655.200160] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2655.201170] ? find_held_lock+0x2c/0x110 [ 2655.202039] ? io_submit_sqes+0x8610/0x8610 [ 2655.202950] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2655.203975] ? wait_for_completion_io+0x270/0x270 [ 2655.204978] ? rcu_read_lock_any_held+0x75/0xa0 [ 2655.205981] ? vfs_write+0x354/0xb10 [ 2655.206768] ? fput_many+0x2f/0x1a0 [ 2655.207544] ? ksys_write+0x1a9/0x260 [ 2655.208334] ? __ia32_sys_read+0xb0/0xb0 [ 2655.209204] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2655.210318] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2655.211421] do_syscall_64+0x33/0x40 [ 2655.212200] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2655.213288] RIP: 0033:0x7f0c174efb19 [ 2655.214081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2655.217958] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2655.219564] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2655.221061] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2655.222572] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2655.224089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2655.225603] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 [ 2655.233837] FAULT_INJECTION: forcing a failure. [ 2655.233837] name failslab, interval 1, probability 0, space 0, times 0 [ 2655.236055] CPU: 1 PID: 46062 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2655.237393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2655.238992] Call Trace: [ 2655.239506] dump_stack+0x107/0x167 [ 2655.240213] should_fail.cold+0x5/0xa [ 2655.240949] ? create_object.isra.0+0x3a/0xa20 [ 2655.241844] should_failslab+0x5/0x20 [ 2655.242570] kmem_cache_alloc+0x5b/0x310 [ 2655.243356] ? mark_held_locks+0x9e/0xe0 [ 2655.244136] create_object.isra.0+0x3a/0xa20 [ 2655.244977] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2655.245961] kmem_cache_alloc_bulk+0x168/0x320 [ 2655.246846] io_submit_sqes+0x6fe6/0x8610 [ 2655.247664] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2655.248596] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2655.249542] ? find_held_lock+0x2c/0x110 [ 2655.250322] ? io_submit_sqes+0x8610/0x8610 [ 2655.251162] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2655.252074] ? wait_for_completion_io+0x270/0x270 [ 2655.252994] ? rcu_read_lock_any_held+0x75/0xa0 [ 2655.253876] ? vfs_write+0x354/0xb10 [ 2655.254582] ? fput_many+0x2f/0x1a0 [ 2655.255265] ? ksys_write+0x1a9/0x260 [ 2655.255984] ? __ia32_sys_read+0xb0/0xb0 [ 2655.256743] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2655.257755] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2655.258721] do_syscall_64+0x33/0x40 [ 2655.259417] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2655.260371] RIP: 0033:0x7f0bbbb8ab19 [ 2655.261081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2655.264518] RSP: 002b:00007f0bb90df188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2655.265961] RAX: ffffffffffffffda RBX: 00007f0bbbc9e020 RCX: 00007f0bbbb8ab19 [ 2655.267308] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2655.268643] RBP: 00007f0bb90df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2655.269981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2655.271305] R13: 00007fff89627cbf R14: 00007f0bb90df300 R15: 0000000000022000 05:42:24 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) 05:42:24 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xea4f0000) 05:42:24 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r2, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) r3 = fork() ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) 05:42:24 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 89) 05:42:24 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:42:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00'}) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000000)) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f0000000080)='net/rfcomm\x00') ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) r5 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) pread64(r5, &(0x7f00000000c0)=""/71, 0x47, 0x0) 05:42:24 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index, 0x0, 0x0, 0x0, 0x12}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x97, 0x80, 0x81, 0xff, 0x0, 0x1000, 0x200, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp, 0x8048, 0xffff, 0xfff, 0x7, 0x5, 0x5, 0x200, 0x0, 0x7fff}) 05:42:24 executing program 6: r0 = syz_io_uring_setup(0x1d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008c80)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x6f3c) io_uring_enter(r0, 0x186e, 0x0, 0x0, 0x0, 0x0) 05:42:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000000)=[r0]}, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/55, 0x37, 0x0) [ 2668.641697] FAULT_INJECTION: forcing a failure. [ 2668.641697] name failslab, interval 1, probability 0, space 0, times 0 [ 2668.644239] CPU: 1 PID: 46178 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2668.645695] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2668.647450] Call Trace: [ 2668.648006] dump_stack+0x107/0x167 [ 2668.648778] should_fail.cold+0x5/0xa [ 2668.649590] ? create_object.isra.0+0x3a/0xa20 [ 2668.650552] should_failslab+0x5/0x20 [ 2668.651355] kmem_cache_alloc+0x5b/0x310 [ 2668.652217] ? mark_held_locks+0x9e/0xe0 [ 2668.653077] create_object.isra.0+0x3a/0xa20 [ 2668.654013] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2668.655087] kmem_cache_alloc_bulk+0x168/0x320 [ 2668.656059] io_submit_sqes+0x6fe6/0x8610 [ 2668.656961] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2668.658026] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2668.659044] ? find_held_lock+0x2c/0x110 [ 2668.659897] ? io_submit_sqes+0x8610/0x8610 [ 2668.660813] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2668.661833] ? wait_for_completion_io+0x270/0x270 [ 2668.662851] ? rcu_read_lock_any_held+0x75/0xa0 [ 2668.663825] ? vfs_write+0x354/0xb10 05:42:24 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/55, 0x37, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000600)={0x5e4, 0x11, 0x410, 0x70bd2d, 0x25dfdbfb, {0x10}, [@typed={0x8, 0x5f, 0x0, 0x0, @u32=0x152}, @nested={0x6b, 0x54, 0x0, 0x1, [@typed={0x7, 0x4, 0x0, 0x0, @str='&/\x00'}, @typed={0xc, 0x3f, 0x0, 0x0, @u64=0x7}, @typed={0xc, 0x28, 0x0, 0x0, @u64=0x1ff}, @generic="d84c7cd60eab28266bf617dfa2b8ddc96a21191d0f09c1ede91dec44c3474d19d26a298e13cc87162225f6e7a4ae4e4126c88fb716255a31d4b509af60ada74a6492ba5f308ae7"]}, @generic="e10e3eefe95350238fc27b982546f01e01513de6c44d7507b4a213ff16dc6487be0ded269b07b45409a73192f4e0d7f084fc9eba366b0b8fb13f10ef308c97f7dc0903409fbd0aed43637a71ce785954da069250c610e1b49c29fe1d31cc7694b7dd2e6218dcb3b93a7b440b933f37eca813aae9f67b1eb20455e19665a03a57aab35353784eebf0819acd051b9de95dd731ffe6f2cad079372a1172feec3917701cefed1c8e54f4122807b59bbfe3903ae3e9223ad5e610935c0f71b240218a60b65dadb8e683e2409d35aaaaa38d50b8473cd33e70f55d91e823acba4a76a71fd0db43a3b3869854b9343ef68d65bee79733cc", @generic="6a217a368b202c1e05879a9badcf88ffded130b711fcae95f9", @nested={0x44c, 0x8d, 0x0, 0x1, [@generic="90dfbc35994b4629c168ed932e20dc9088abea5f7e43fdb484d91b8d2e4f9e251501e202706ed748496195162fb7caebb33302cd4859500e6b403887f6e224ef166a894a34bd13e1bdcf6cf4a2fd67d230cae9dd9e70c55f07477d5cbbdeab285934bc2e04a7f1c30568c38a2c0fe5ae05e2909f6c3efa874bdd140b761873a87a29447773ac012a15b63f682cbd8f43fc24a9f26ad22b3ea0e7616ea995405a45e65f11f556206c315cd829bcbb7e872e4630ad2e2fc15f531c174bd19a47bf4c840b", @generic="11af0db5e20f23aac5d7324da0eca325df9cb31c5f4413899897a44340343599691f79ea5b446d68f09def31448aa29dcf72e82aa596aa06f79bae28dc504ed6e3e437c40688563c7c19e07d24807de6651994ebf70160b637feb67e938e0dcd85247d139131b2898172db1fb042af18b93cda03c1c6a11789aa3b9661f7af56973ff8bf915b17b95ebc155c5aa74c85fbf9a60a4573a9451067e80d2e709cac5eebfa0efcd265620f3d1d3a0badb20146acf97173533b6c20d5df9179887c75423a2609e7024f", @generic="77f2829852793f51f12697f40556bcac74c99a3daa48008e577d9b1ba925da4bed841d4bba08010962ac7b8b2d119d14edcf818857e28214d7a20808cd6b684ddbea6e69ffc6c6f8a1d7855c464dbb37d61f87b75cc014cdb9417153573c904e326326d16f18838c594ed06bd8c97761502f52cfeb58fa7c2bcfae88d7483ba24651b52c089512b622a7b964193f6029d32af4cc9f4dc1a9bd47728f5519ea76f544e35176a50052c7992dfb532dbf0d93083db5ca4ab4660b63039f97d2ce9aa7ea2c5a11296c4228700c0cea477cef9cd192f3f393afbd62949d749485d59912d36cad", @generic="e2c5169b2a220388253eff3d7b1b8a498f0d8f88a30b0658d308e15ec1e1cd84ae7b5f91dee473c9a94f003db756665bfc215d1b3af16c28ed775ea739ae6fa708d6d5da57f9544d3480a9b222f3abcb07722536a89a13bfa2f67d6fedc75269", @generic="ae7e214013e2761f62e11501f0dcaee140b21ad690b85c7f12f18a88ffb5b41ab01ae99796d63492751c278f84b4e832788d275651a6a881dd81feadb84e98421b7f221e07882751794bf41a45206b05b6dc0fde169277741798f17eea74c61c8c8518edb18eb9367819ebe0c4793c22de9b6443cbae3ed792e05399bd9c91b1f9ada68f6d7cc2833a7a31f40ea3062ff8634967615d6dc1510fda58ac43a95995fd2acc848c17a562797a39bedef656484eb3a3766344ef41ec94d4c62493ce5529ba94b0946a6ad80e18790d7c6d0cbba897432fde05a9a8893c525f010667d1c47f02d311faa6ce44e60c", @generic="d3a83fb909926a6f8b5665233957c578e5797214bbe8", @generic="05eb63098d90d7d8eefd58b4258ad4f9b8b45b5453e10246d54508d6820582f6bdbc3a8a1756335036593fc4e3845a52de2f242899e76164bda59ec46a3e752a09356481c18ff1a04ae8eb8a6be27395ba7911ba12e7f8f161fd29ca15ecb1fe2b7358054ba3b63770e3c2a93ce4f2e0", @typed={0x8, 0x38, 0x0, 0x0, @uid=0xee01}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x4000}, 0x40) [ 2668.664617] ? fput_many+0x2f/0x1a0 [ 2668.665598] ? ksys_write+0x1a9/0x260 [ 2668.666400] ? __ia32_sys_read+0xb0/0xb0 [ 2668.667258] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2668.668365] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2668.669458] do_syscall_64+0x33/0x40 [ 2668.670233] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2668.671301] RIP: 0033:0x7f0c174efb19 [ 2668.672081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2668.675930] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2668.677547] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2668.679041] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2668.680528] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2668.682022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2668.683521] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 [ 2668.696651] FAULT_INJECTION: forcing a failure. [ 2668.696651] name failslab, interval 1, probability 0, space 0, times 0 [ 2668.699234] CPU: 1 PID: 46171 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2668.700685] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2668.702445] Call Trace: [ 2668.703001] dump_stack+0x107/0x167 [ 2668.703784] should_fail.cold+0x5/0xa [ 2668.704590] ? create_object.isra.0+0x3a/0xa20 [ 2668.705560] should_failslab+0x5/0x20 [ 2668.706362] kmem_cache_alloc+0x5b/0x310 [ 2668.707217] ? mark_held_locks+0x9e/0xe0 [ 2668.708081] create_object.isra.0+0x3a/0xa20 [ 2668.709008] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2668.710091] kmem_cache_alloc_bulk+0x168/0x320 [ 2668.711065] io_submit_sqes+0x6fe6/0x8610 [ 2668.711961] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2668.713009] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2668.714036] ? find_held_lock+0x2c/0x110 [ 2668.714893] ? io_submit_sqes+0x8610/0x8610 [ 2668.715807] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2668.716821] ? wait_for_completion_io+0x270/0x270 [ 2668.717843] ? rcu_read_lock_any_held+0x75/0xa0 [ 2668.718817] ? vfs_write+0x354/0xb10 [ 2668.719608] ? fput_many+0x2f/0x1a0 [ 2668.720381] ? ksys_write+0x1a9/0x260 [ 2668.721191] ? __ia32_sys_read+0xb0/0xb0 [ 2668.722052] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2668.723161] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2668.724258] do_syscall_64+0x33/0x40 [ 2668.725049] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2668.726135] RIP: 0033:0x7f0bbbb8ab19 [ 2668.726922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2668.730794] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2668.732398] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2668.733900] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2668.735407] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2668.736912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 05:42:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/39, 0x27, 0x0) fstat(r0, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000017fffffc93bdfe1be07349ac68fd4a824af70e7712c62d5b509c1d23a834e4017cc6d8ef15083a67002682d327fbafc7c24951717517049374a61aa58bbe47590ff1badb8398b7", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x1, 0x8f24, 0x61, @empty, @private2, 0x7800, 0x7800, 0x9, 0xdbf2}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000240)) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x7}, 0x4) [ 2668.738436] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 05:42:24 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) gettid() syz_open_dev$mouse(&(0x7f0000000100), 0x7d0e, 0x101000) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) sendfile(r0, r1, 0x0, 0xffe3) r3 = fork() ptrace(0x10, r3) 05:42:24 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'syzkaller1\x00'}) pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000080)={"d781366096bed69b2b6f7d5b799242f0", 0x0, 0x0, {0x9, 0x59c}, {0x1, 0x201f}, 0x71f, [0x0, 0x3, 0x4, 0x8, 0xfffffffffffffeff, 0x3, 0x9, 0x80000001, 0x6, 0xfffffffffffffffa, 0x8, 0xffffffff7fffffff, 0x80000100, 0x6, 0x8, 0x1]}) 05:42:24 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/55, 0x37, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c65ad277da840"]) r2 = fork() ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 05:42:24 executing program 5: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x0, 0x321}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) 05:42:24 executing program 2: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r5, &(0x7f0000000040)=""/55, 0x37, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_io_uring_setup(0x3657, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x3, 0x321, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xec4f0000) [ 2668.982295] FAULT_INJECTION: forcing a failure. [ 2668.982295] name failslab, interval 1, probability 0, space 0, times 0 [ 2668.983756] CPU: 0 PID: 46421 Comm: syz-executor.5 Not tainted 5.10.239 #1 [ 2668.984549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2668.985512] Call Trace: [ 2668.985819] dump_stack+0x107/0x167 [ 2668.986236] should_fail.cold+0x5/0xa [ 2668.986671] ? create_object.isra.0+0x3a/0xa20 [ 2668.987197] should_failslab+0x5/0x20 [ 2668.987632] kmem_cache_alloc+0x5b/0x310 [ 2668.988101] ? mark_held_locks+0x9e/0xe0 [ 2668.988565] create_object.isra.0+0x3a/0xa20 [ 2668.989070] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2668.989659] kmem_cache_alloc_bulk+0x168/0x320 [ 2668.990187] io_submit_sqes+0x6fe6/0x8610 [ 2668.990675] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2668.991252] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2668.991801] ? find_held_lock+0x2c/0x110 [ 2668.992270] ? io_submit_sqes+0x8610/0x8610 [ 2668.992763] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2668.993317] ? wait_for_completion_io+0x270/0x270 [ 2668.993870] ? rcu_read_lock_any_held+0x75/0xa0 [ 2668.994404] ? vfs_write+0x354/0xb10 [ 2668.994829] ? fput_many+0x2f/0x1a0 [ 2668.995248] ? ksys_write+0x1a9/0x260 [ 2668.995681] ? __ia32_sys_read+0xb0/0xb0 [ 2668.996146] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2668.996742] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2668.997620] do_syscall_64+0x33/0x40 [ 2668.998414] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2668.999489] RIP: 0033:0x7f0c174efb19 [ 2669.000271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2669.004160] RSP: 002b:00007f0c14a65188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2669.005766] RAX: ffffffffffffffda RBX: 00007f0c17602f60 RCX: 00007f0c174efb19 [ 2669.007252] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2669.008751] RBP: 00007f0c14a651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2669.010253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2669.011748] R13: 00007ffd2d2ece3f R14: 00007f0c14a65300 R15: 0000000000022000 05:42:25 executing program 3: r0 = syz_io_uring_setup(0x1841, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018af69d3cf2894efd59ae18e60cf9f5fec000000000000000707d3a13fade3262620d2c3a6dc3da466e2aec9ad4b3f19ace1e00442b0c19c07e84940d8fbe0c495d0c32c7f3f11e2e5d48e5530db1cc6", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fadvise64(r0, 0xfff, 0x2, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 90) [ 2669.120685] FAULT_INJECTION: forcing a failure. [ 2669.120685] name failslab, interval 1, probability 0, space 0, times 0 [ 2669.123326] CPU: 1 PID: 46499 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 2669.124777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2669.126532] Call Trace: [ 2669.127092] dump_stack+0x107/0x167 [ 2669.127856] should_fail.cold+0x5/0xa [ 2669.128657] ? create_object.isra.0+0x3a/0xa20 [ 2669.129626] should_failslab+0x5/0x20 [ 2669.130424] kmem_cache_alloc+0x5b/0x310 [ 2669.131275] ? mark_held_locks+0x9e/0xe0 [ 2669.132124] create_object.isra.0+0x3a/0xa20 [ 2669.133034] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2669.134117] kmem_cache_alloc_bulk+0x168/0x320 [ 2669.135083] io_submit_sqes+0x6fe6/0x8610 [ 2669.135981] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2669.137015] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2669.138029] ? find_held_lock+0x2c/0x110 [ 2669.138883] ? io_submit_sqes+0x8610/0x8610 [ 2669.139794] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2669.140805] ? wait_for_completion_io+0x270/0x270 [ 2669.141829] ? rcu_read_lock_any_held+0x75/0xa0 [ 2669.142797] ? vfs_write+0x354/0xb10 [ 2669.143582] ? fput_many+0x2f/0x1a0 [ 2669.144341] ? ksys_write+0x1a9/0x260 [ 2669.145139] ? __ia32_sys_read+0xb0/0xb0 [ 2669.145996] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2669.147108] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2669.148184] do_syscall_64+0x33/0x40 [ 2669.148967] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2669.150046] RIP: 0033:0x7f0bbbb8ab19 [ 2669.150824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2669.154658] RSP: 002b:00007f0bb9100188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2669.156246] RAX: ffffffffffffffda RBX: 00007f0bbbc9df60 RCX: 00007f0bbbb8ab19 [ 2669.157772] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2669.159318] RBP: 00007f0bb91001d0 R08: 0000000000000000 R09: 0000000000000000 [ 2669.160803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2669.162301] R13: 00007fff89627cbf R14: 00007f0bb9100300 R15: 0000000000022000 VM DIAGNOSIS: 05:47:28 Registers: info registers vcpu 0 RAX=ffffffff83e942d0 RBX=0000000000000000 RCX=ffffffff83e7bf7c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e949e8 RBP=0000000000000000 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85678988 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e942de RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005589cd937678 CR3=000000001ace4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=000000c000148060000000c000148030 XMM04=000000c0001480c0000000c000148090 XMM05=000000c000148120000000c0001480f0 XMM06=000000c00008f4d0000000c000148150 XMM07=000000c0001478c0000000c000148180 XMM08=000000c0000ee090000000c0000ee060 XMM09=000000c0000ee0f0000000c0000ee0c0 XMM10=000000c0000ee150000000c0000ee120 XMM11=000000c00008e4e0000000c0000ee180 XMM12=000000c0000f0c60000000c0000ee1b0 XMM13=636578650a00657a696d696e696d2063 XMM14=6e696820636578650a006873616d7320 XMM15=0000736465657320636578650a007374 info registers vcpu 1 RAX=ffffffff83e942d0 RBX=0000000000000001 RCX=ffffffff83e7bf7c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e949e8 RBP=0000000000000001 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85678988 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e942de RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f93e0df5000 CR3=000000001ace4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=009f02fe016c6c6f502e726567616e61 XMM02=61746f7420636578650a0a0100010101 XMM03=7473657220726f74756365786511006c XMM04=676169727420636578650b0073747261 XMM05=650a006873616d7320636578650a0065 XMM06=20636578650a0073746e696820636578 XMM07=006e6567206365786508007364656573 XMM08=726f74756365786511006c61746f7420 XMM09=20636578650b00737472617473657220 XMM10=616d7320636578650a00656761697274 XMM11=0a0073746e696820636578650a006873 XMM12=63657865080073646565732063657865 XMM13=007a7a7566206365786509006e656720 XMM14=006574616469646e616320636578650e XMM15=0000657a696d696e696d20636578650d