=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:19 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:06:19 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {0x0}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:06:19 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:19 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:19 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:19 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:19 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:19 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:19 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:19 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:19 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:06:19 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:06:37 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {0x0}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:06:37 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:06:37 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:37 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:37 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:06:37 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:37 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:06:37 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:37 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:37 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:37 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:37 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:06:37 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:37 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:37 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:37 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:51 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:06:51 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:06:51 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:51 executing program 0: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:06:51 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:51 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:51 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:51 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:06:51 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:51 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:51 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:51 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:51 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:52 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:06:52 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:52 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:06:52 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:06:52 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:06:52 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:06 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:07:06 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:06 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:06 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:06 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:07:06 executing program 0: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:07:06 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:06 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:07:06 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:07 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:07 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r3, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r4, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:07 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:07 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:07 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r3, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r4, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:20 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r3, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r4, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:20 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:20 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:20 executing program 0: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:07:20 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:07:20 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:20 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:07:20 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:07:20 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:20 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:20 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:20 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:21 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:37 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:37 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:37 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:07:37 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:07:37 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:37 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:07:37 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:07:37 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:37 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:37 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:37 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:37 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:37 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:07:37 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:37 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:37 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:07:51 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:51 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x0, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:51 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:07:51 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:51 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:07:51 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:51 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:07:51 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:07:51 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:51 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:51 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:51 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x0, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:51 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:51 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:51 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:07:51 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:52 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:07:52 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:05 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x0, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:05 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:08:05 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:08:05 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:05 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:05 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:05 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:08:05 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:08:06 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:06 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {0x0}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:08:06 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:06 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:06 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:08:06 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:06 executing program 0: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:08:06 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:06 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:06 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {0x0}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:08:06 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:06 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:19 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {0x0}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:08:19 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:19 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:08:19 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:19 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:19 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {0x0}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:08:19 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:08:19 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:19 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x0, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:19 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:35 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:35 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:35 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:08:35 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:08:35 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:08:35 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {0x0}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:08:35 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:35 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x0, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:35 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:35 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:35 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:35 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:35 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:35 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x0, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:35 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:08:35 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) 13:08:35 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:35 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {0x0}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:08:35 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) 13:08:36 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) 13:08:36 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:08:53 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:53 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:08:53 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:08:53 executing program 4: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:53 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:53 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:53 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {0x0}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:08:53 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {0x0}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:08:54 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:54 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:54 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:08:54 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:10 executing program 4: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:10 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {0x0}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:09:10 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 13:09:10 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {0x0}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:09:10 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:10 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:09:10 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:09:10 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:10 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 13:09:10 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x0, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:10 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:11 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 13:09:11 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:11 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x0, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:11 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {0x0}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:09:11 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:09:26 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:09:26 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x0, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:26 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {0x0}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:09:26 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) 13:09:26 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:26 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:09:26 executing program 4: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:26 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:09:26 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:26 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) 13:09:26 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:27 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) 13:09:27 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:27 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:27 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:09:27 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:09:27 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:27 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:27 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:43 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:43 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:43 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:43 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:43 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:09:43 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:09:43 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:09:43 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:09:43 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:43 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:43 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:43 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:09:43 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:09:43 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(0x0, 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:43 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(0x0, 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:57 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:09:57 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:09:57 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(0x0, 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:57 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:09:57 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:09:57 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:09:57 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:58 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:58 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:09:58 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:58 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:09:58 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:09:58 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:09:58 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:09:58 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:09:58 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:09:58 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:10:12 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:10:12 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:10:12 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:10:12 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:10:12 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:10:12 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:10:12 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:10:12 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:10:12 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:10:12 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:10:12 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:10:12 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:10:12 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x0) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:10:12 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r2, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:10:12 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:10:13 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r2, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:10:28 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:10:28 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:10:28 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:10:28 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:10:28 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:10:28 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x0) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:10:28 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r2, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:10:28 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:10:29 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r2, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:10:29 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:10:29 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x0) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:10:29 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:10:29 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r2, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:10:29 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:10:29 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:10:45 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:10:45 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:10:45 executing program 4: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:10:45 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:10:45 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r2, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:10:45 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:10:45 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:10:45 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {0x0}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:10:45 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:10:46 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:10:46 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:10:46 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:10:46 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:11:02 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:02 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:11:02 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:11:02 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:02 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:02 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {0x0}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:11:02 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:11:02 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:11:02 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:02 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:02 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:02 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:11:03 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:03 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {0x0}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:11:03 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:03 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:11:17 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:17 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:11:17 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:17 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:17 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:11:17 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:17 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:11:17 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:11:17 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 13:11:17 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:11:17 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:17 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:17 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 13:11:17 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:11:17 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:11:17 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 13:11:17 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:31 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:11:31 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:31 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) 13:11:31 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:31 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:11:31 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(0x0, 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:31 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:11:31 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:11:32 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) syz_io_uring_submit(0x0, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:11:32 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(0x0, 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:32 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) 13:11:32 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:11:32 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(0x0, 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:32 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:32 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) 13:11:32 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:11:46 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:11:46 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:11:46 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:46 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) syz_io_uring_submit(0x0, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:11:46 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:11:46 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:46 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:46 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:11:46 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:46 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:46 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:46 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:46 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:11:46 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:46 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:11:46 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:11:46 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:11:46 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:47 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:11:47 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:12:01 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:12:01 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:12:01 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:12:01 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:12:01 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:12:01 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:12:01 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:12:01 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x0) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) [ 2294.703468] FAULT_INJECTION: forcing a failure. [ 2294.703468] name failslab, interval 1, probability 0, space 0, times 1 [ 2294.706514] CPU: 1 PID: 12205 Comm: syz-executor.7 Not tainted 5.10.175 #1 [ 2294.707932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2294.709591] Call Trace: [ 2294.710125] dump_stack+0x107/0x167 [ 2294.710868] should_fail.cold+0x5/0xa [ 2294.711638] should_failslab+0x5/0x20 [ 2294.712415] kmem_cache_alloc_bulk+0x4b/0x320 [ 2294.713319] io_submit_sqes+0x7099/0x86e0 [ 2294.714164] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2294.714958] FAULT_INJECTION: forcing a failure. [ 2294.714958] name failslab, interval 1, probability 0, space 0, times 1 [ 2294.715190] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2294.718389] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2294.719372] ? io_submit_sqes+0x86e0/0x86e0 [ 2294.720254] ? recalibrate_cpu_khz+0x10/0x10 [ 2294.721129] ? ktime_get+0x158/0x1f0 [ 2294.721883] ? lapic_timer_set_periodic+0x60/0x60 [ 2294.722845] ? clockevents_program_event+0x131/0x360 [ 2294.723873] ? tick_program_event+0xa8/0x140 [ 2294.724755] ? hrtimer_interrupt+0x60f/0x9b0 [ 2294.725651] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2294.726687] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2294.727714] do_syscall_64+0x33/0x40 [ 2294.728469] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2294.729482] RIP: 0033:0x7ff0ec34ab19 [ 2294.730222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2294.733849] RSP: 002b:00007ff0e98c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2294.735356] RAX: ffffffffffffffda RBX: 00007ff0ec45df60 RCX: 00007ff0ec34ab19 [ 2294.736781] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2294.738189] RBP: 00007ff0e98c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2294.739596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2294.741014] R13: 00007ffe29f5ce9f R14: 00007ff0e98c0300 R15: 0000000000022000 [ 2294.742459] CPU: 0 PID: 12210 Comm: syz-executor.5 Not tainted 5.10.175 #1 [ 2294.743859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2294.745507] Call Trace: [ 2294.746036] dump_stack+0x107/0x167 [ 2294.746768] should_fail.cold+0x5/0xa [ 2294.747531] should_failslab+0x5/0x20 [ 2294.748296] kmem_cache_alloc_bulk+0x4b/0x320 [ 2294.749190] io_submit_sqes+0x7099/0x86e0 [ 2294.750020] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2294.751005] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2294.752009] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2294.752970] ? lock_downgrade+0x6d0/0x6d0 [ 2294.753791] ? find_held_lock+0x2c/0x110 [ 2294.754600] ? io_submit_sqes+0x86e0/0x86e0 [ 2294.755466] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2294.756439] ? wait_for_completion_io+0x270/0x270 [ 2294.757399] ? rcu_read_lock_any_held+0x75/0xa0 [ 2294.758323] ? vfs_write+0x354/0xa70 [ 2294.759076] ? fput_many+0x2f/0x1a0 [ 2294.759809] ? ksys_write+0x1a9/0x260 [ 2294.760579] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2294.761617] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2294.762648] do_syscall_64+0x33/0x40 [ 2294.763395] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2294.764437] RIP: 0033:0x7f0434711b19 [ 2294.765179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2294.768821] RSP: 002b:00007f0431c87188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2294.770330] RAX: ffffffffffffffda RBX: 00007f0434824f60 RCX: 00007f0434711b19 [ 2294.771750] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2294.773183] RBP: 00007f0431c871d0 R08: 0000000000000000 R09: 0000000000000000 [ 2294.774601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2294.776026] R13: 00007ffd8b38596f R14: 00007f0431c87300 R15: 0000000000022000 13:12:02 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x0) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:12:02 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:12:02 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:12:02 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:12:02 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x0) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) [ 2295.144357] FAULT_INJECTION: forcing a failure. [ 2295.144357] name failslab, interval 1, probability 0, space 0, times 0 [ 2295.146911] CPU: 1 PID: 12231 Comm: syz-executor.7 Not tainted 5.10.175 #1 [ 2295.148311] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2295.149980] Call Trace: [ 2295.150524] dump_stack+0x107/0x167 [ 2295.151272] should_fail.cold+0x5/0xa [ 2295.152072] ? create_object.isra.0+0x3a/0xa20 [ 2295.153001] should_failslab+0x5/0x20 [ 2295.153779] kmem_cache_alloc+0x5b/0x360 [ 2295.154614] create_object.isra.0+0x3a/0xa20 [ 2295.155502] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2295.156541] kmem_cache_alloc_bulk+0x168/0x320 [ 2295.157477] io_submit_sqes+0x7099/0x86e0 [ 2295.158324] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2295.159328] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2295.160341] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2295.161321] ? lock_downgrade+0x6d0/0x6d0 [ 2295.162158] ? find_held_lock+0x2c/0x110 [ 2295.162997] ? io_submit_sqes+0x86e0/0x86e0 [ 2295.163901] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2295.164881] ? wait_for_completion_io+0x270/0x270 [ 2295.165866] ? rcu_read_lock_any_held+0x75/0xa0 [ 2295.166802] ? vfs_write+0x354/0xa70 [ 2295.167562] ? fput_many+0x2f/0x1a0 [ 2295.168311] ? ksys_write+0x1a9/0x260 [ 2295.169093] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2295.170143] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2295.171416] do_syscall_64+0x33/0x40 [ 2295.172277] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2295.173358] RIP: 0033:0x7ff0ec34ab19 [ 2295.174140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2295.178039] RSP: 002b:00007ff0e98c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2295.179642] RAX: ffffffffffffffda RBX: 00007ff0ec45df60 RCX: 00007ff0ec34ab19 [ 2295.181154] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2295.182648] RBP: 00007ff0e98c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2295.184151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2295.185643] R13: 00007ffe29f5ce9f R14: 00007ff0e98c0300 R15: 0000000000022000 [ 2295.206516] FAULT_INJECTION: forcing a failure. [ 2295.206516] name failslab, interval 1, probability 0, space 0, times 0 [ 2295.208984] CPU: 1 PID: 12234 Comm: syz-executor.5 Not tainted 5.10.175 #1 [ 2295.210360] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2295.212014] Call Trace: [ 2295.212541] dump_stack+0x107/0x167 [ 2295.213274] should_fail.cold+0x5/0xa [ 2295.214034] ? create_object.isra.0+0x3a/0xa20 [ 2295.214944] should_failslab+0x5/0x20 [ 2295.215704] kmem_cache_alloc+0x5b/0x360 [ 2295.216525] create_object.isra.0+0x3a/0xa20 [ 2295.217396] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2295.218405] kmem_cache_alloc_bulk+0x168/0x320 [ 2295.219312] io_submit_sqes+0x7099/0x86e0 [ 2295.220160] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2295.221143] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2295.222125] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2295.223081] ? lock_downgrade+0x6d0/0x6d0 [ 2295.223906] ? find_held_lock+0x2c/0x110 [ 2295.224714] ? io_submit_sqes+0x86e0/0x86e0 [ 2295.225577] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2295.226536] ? wait_for_completion_io+0x270/0x270 [ 2295.227490] ? rcu_read_lock_any_held+0x75/0xa0 [ 2295.228433] ? vfs_write+0x354/0xa70 [ 2295.229172] ? fput_many+0x2f/0x1a0 [ 2295.229892] ? ksys_write+0x1a9/0x260 [ 2295.230653] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2295.231685] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2295.232718] do_syscall_64+0x33/0x40 [ 2295.233457] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2295.234464] RIP: 0033:0x7f0434711b19 [ 2295.235200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2295.238815] RSP: 002b:00007f0431c87188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2295.240329] RAX: ffffffffffffffda RBX: 00007f0434824f60 RCX: 00007f0434711b19 [ 2295.241739] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2295.243149] RBP: 00007f0431c871d0 R08: 0000000000000000 R09: 0000000000000000 [ 2295.244562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2295.245967] R13: 00007ffd8b38596f R14: 00007f0431c87300 R15: 0000000000022000 13:12:17 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:12:17 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {0x0}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:12:17 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:12:17 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:12:17 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:12:17 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:12:17 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:12:17 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) [ 2310.054044] FAULT_INJECTION: forcing a failure. [ 2310.054044] name failslab, interval 1, probability 0, space 0, times 0 [ 2310.055304] CPU: 0 PID: 12265 Comm: syz-executor.7 Not tainted 5.10.175 #1 [ 2310.056055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2310.056947] Call Trace: [ 2310.057239] dump_stack+0x107/0x167 [ 2310.057631] should_fail.cold+0x5/0xa [ 2310.058046] ? create_object.isra.0+0x3a/0xa20 [ 2310.058537] should_failslab+0x5/0x20 [ 2310.058944] kmem_cache_alloc+0x5b/0x360 [ 2310.059378] ? mark_held_locks+0x9e/0xe0 [ 2310.059820] create_object.isra.0+0x3a/0xa20 [ 2310.060293] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2310.060842] kmem_cache_alloc_bulk+0x168/0x320 [ 2310.061336] io_submit_sqes+0x7099/0x86e0 [ 2310.061779] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2310.062309] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2310.062843] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2310.063357] ? lock_downgrade+0x6d0/0x6d0 [ 2310.063801] ? find_held_lock+0x2c/0x110 [ 2310.064239] ? io_submit_sqes+0x86e0/0x86e0 [ 2310.064704] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2310.065223] ? wait_for_completion_io+0x270/0x270 [ 2310.065741] ? rcu_read_lock_any_held+0x75/0xa0 [ 2310.066238] ? vfs_write+0x354/0xa70 [ 2310.066637] ? fput_many+0x2f/0x1a0 [ 2310.067025] ? ksys_write+0x1a9/0x260 [ 2310.067436] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2310.068006] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2310.068556] do_syscall_64+0x33/0x40 [ 2310.068956] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2310.069501] RIP: 0033:0x7ff0ec34ab19 [ 2310.069898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2310.071841] RSP: 002b:00007ff0e98c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2310.072654] RAX: ffffffffffffffda RBX: 00007ff0ec45df60 RCX: 00007ff0ec34ab19 [ 2310.073409] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2310.074166] RBP: 00007ff0e98c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2310.074919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2310.075676] R13: 00007ffe29f5ce9f R14: 00007ff0e98c0300 R15: 0000000000022000 [ 2310.126337] FAULT_INJECTION: forcing a failure. [ 2310.126337] name failslab, interval 1, probability 0, space 0, times 0 [ 2310.129300] CPU: 1 PID: 12268 Comm: syz-executor.5 Not tainted 5.10.175 #1 [ 2310.130848] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2310.132736] Call Trace: [ 2310.133336] dump_stack+0x107/0x167 [ 2310.134132] should_fail.cold+0x5/0xa [ 2310.134965] ? create_object.isra.0+0x3a/0xa20 [ 2310.135990] should_failslab+0x5/0x20 [ 2310.136824] kmem_cache_alloc+0x5b/0x360 [ 2310.137730] ? mark_held_locks+0x9e/0xe0 [ 2310.138616] create_object.isra.0+0x3a/0xa20 [ 2310.139568] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2310.140669] kmem_cache_alloc_bulk+0x168/0x320 [ 2310.141672] io_submit_sqes+0x7099/0x86e0 [ 2310.142566] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2310.143690] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2310.144778] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2310.145864] ? lock_downgrade+0x6d0/0x6d0 [ 2310.146750] ? find_held_lock+0x2c/0x110 [ 2310.147688] ? io_submit_sqes+0x86e0/0x86e0 [ 2310.148636] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2310.149745] ? wait_for_completion_io+0x270/0x270 [ 2310.150783] ? rcu_read_lock_any_held+0x75/0xa0 [ 2310.151846] ? vfs_write+0x354/0xa70 [ 2310.152665] ? fput_many+0x2f/0x1a0 [ 2310.153482] ? ksys_write+0x1a9/0x260 [ 2310.154311] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2310.155504] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2310.156630] do_syscall_64+0x33/0x40 [ 2310.157460] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2310.158565] RIP: 0033:0x7f0434711b19 [ 2310.159385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2310.163347] RSP: 002b:00007f0431c87188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2310.165005] RAX: ffffffffffffffda RBX: 00007f0434824f60 RCX: 00007f0434711b19 [ 2310.166601] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2310.168215] RBP: 00007f0431c871d0 R08: 0000000000000000 R09: 0000000000000000 [ 2310.169740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2310.171360] R13: 00007ffd8b38596f R14: 00007f0431c87300 R15: 0000000000022000 13:12:17 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {0x0}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:12:17 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:12:17 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:12:17 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:12:17 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) [ 2310.448650] FAULT_INJECTION: forcing a failure. [ 2310.448650] name failslab, interval 1, probability 0, space 0, times 0 [ 2310.451517] CPU: 1 PID: 12289 Comm: syz-executor.7 Not tainted 5.10.175 #1 [ 2310.453103] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2310.454993] Call Trace: [ 2310.455579] dump_stack+0x107/0x167 [ 2310.456405] should_fail.cold+0x5/0xa [ 2310.457269] ? create_object.isra.0+0x3a/0xa20 [ 2310.458320] should_failslab+0x5/0x20 [ 2310.459189] kmem_cache_alloc+0x5b/0x360 [ 2310.460137] ? mark_held_locks+0x9e/0xe0 [ 2310.461060] create_object.isra.0+0x3a/0xa20 [ 2310.462052] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2310.463208] kmem_cache_alloc_bulk+0x168/0x320 [ 2310.464258] io_submit_sqes+0x7099/0x86e0 [ 2310.465201] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2310.466321] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2310.467465] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2310.468579] ? lock_downgrade+0x6d0/0x6d0 [ 2310.469515] ? find_held_lock+0x2c/0x110 [ 2310.470441] ? io_submit_sqes+0x86e0/0x86e0 [ 2310.471442] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2310.472553] ? wait_for_completion_io+0x270/0x270 [ 2310.473654] ? rcu_read_lock_any_held+0x75/0xa0 [ 2310.474653] ? vfs_write+0x354/0xa70 [ 2310.475487] ? fput_many+0x2f/0x1a0 [ 2310.476285] ? ksys_write+0x1a9/0x260 [ 2310.477151] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2310.478277] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2310.479458] do_syscall_64+0x33/0x40 [ 2310.480268] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2310.481427] RIP: 0033:0x7ff0ec34ab19 [ 2310.482224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2310.486245] RSP: 002b:00007ff0e98c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2310.487997] RAX: ffffffffffffffda RBX: 00007ff0ec45df60 RCX: 00007ff0ec34ab19 [ 2310.489518] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2310.491062] RBP: 00007ff0e98c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2310.492610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2310.494147] R13: 00007ffe29f5ce9f R14: 00007ff0e98c0300 R15: 0000000000022000 13:12:17 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {0x0}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:12:17 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) [ 2310.599047] FAULT_INJECTION: forcing a failure. [ 2310.599047] name failslab, interval 1, probability 0, space 0, times 0 [ 2310.601520] CPU: 1 PID: 12306 Comm: syz-executor.5 Not tainted 5.10.175 #1 [ 2310.603010] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2310.604804] Call Trace: [ 2310.605377] dump_stack+0x107/0x167 [ 2310.606180] should_fail.cold+0x5/0xa [ 2310.607008] ? create_object.isra.0+0x3a/0xa20 [ 2310.608017] should_failslab+0x5/0x20 [ 2310.608834] kmem_cache_alloc+0x5b/0x360 [ 2310.609724] create_object.isra.0+0x3a/0xa20 [ 2310.610682] kmemleak_alloc_percpu+0xa0/0x100 [ 2310.611650] pcpu_alloc+0x4e2/0x1360 [ 2310.612496] __percpu_counter_init+0x10d/0x2d0 [ 2310.613501] io_uring_alloc_task_context+0xcc/0x6a0 [ 2310.614585] ? io_sqe_buffer_register+0x13d0/0x13d0 [ 2310.615670] ? find_held_lock+0x2c/0x110 [ 2310.616570] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2310.617626] __io_uring_add_tctx_node+0x2c6/0x520 [ 2310.618670] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2310.619829] __do_sys_io_uring_enter+0x136d/0x17b0 [ 2310.620907] ? lock_downgrade+0x6d0/0x6d0 [ 2310.621809] ? find_held_lock+0x2c/0x110 [ 2310.622688] ? io_submit_sqes+0x86e0/0x86e0 [ 2310.623638] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2310.624688] ? wait_for_completion_io+0x270/0x270 [ 2310.625741] ? rcu_read_lock_any_held+0x75/0xa0 [ 2310.626738] ? vfs_write+0x354/0xa70 [ 2310.627559] ? fput_many+0x2f/0x1a0 [ 2310.628372] ? ksys_write+0x1a9/0x260 [ 2310.629216] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2310.630345] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2310.631474] do_syscall_64+0x33/0x40 [ 2310.632296] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2310.633406] RIP: 0033:0x7f0434711b19 [ 2310.634212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2310.638233] RSP: 002b:00007f0431c66188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2310.639853] RAX: ffffffffffffffda RBX: 00007f0434825020 RCX: 00007f0434711b19 [ 2310.641413] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2310.642943] RBP: 00007f0431c661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2310.644521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2310.646055] R13: 00007ffd8b38596f R14: 00007f0431c66300 R15: 0000000000022000 13:12:17 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {0x0}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:12:17 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:12:18 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:12:18 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:12:18 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:12:18 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:12:18 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:12:18 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) [ 2310.985278] FAULT_INJECTION: forcing a failure. [ 2310.985278] name failslab, interval 1, probability 0, space 0, times 0 [ 2310.988113] CPU: 1 PID: 12328 Comm: syz-executor.7 Not tainted 5.10.175 #1 [ 2310.989667] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2310.991436] Call Trace: [ 2310.992043] dump_stack+0x107/0x167 [ 2310.992831] should_fail.cold+0x5/0xa [ 2310.993702] ? create_object.isra.0+0x3a/0xa20 [ 2310.994684] should_failslab+0x5/0x20 [ 2310.995555] kmem_cache_alloc+0x5b/0x360 [ 2310.996443] ? mark_held_locks+0x9e/0xe0 [ 2310.997328] create_object.isra.0+0x3a/0xa20 [ 2310.998277] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2310.999381] kmem_cache_alloc_bulk+0x168/0x320 [ 2311.000428] io_submit_sqes+0x7099/0x86e0 [ 2311.001331] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2311.002442] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2311.003519] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2311.004631] ? lock_downgrade+0x6d0/0x6d0 [ 2311.005524] ? find_held_lock+0x2c/0x110 [ 2311.006448] ? io_submit_sqes+0x86e0/0x86e0 [ 2311.007417] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2311.008519] ? wait_for_completion_io+0x270/0x270 [ 2311.009568] ? rcu_read_lock_any_held+0x75/0xa0 [ 2311.010621] ? vfs_write+0x354/0xa70 [ 2311.011436] ? fput_many+0x2f/0x1a0 [ 2311.012265] ? ksys_write+0x1a9/0x260 [ 2311.013102] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2311.014275] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2311.015392] do_syscall_64+0x33/0x40 [ 2311.016248] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2311.017355] RIP: 0033:0x7ff0ec34ab19 [ 2311.018156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2311.022115] RSP: 002b:00007ff0e98c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2311.023754] RAX: ffffffffffffffda RBX: 00007ff0ec45df60 RCX: 00007ff0ec34ab19 [ 2311.025306] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2311.026843] RBP: 00007ff0e98c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2311.028388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2311.029923] R13: 00007ffe29f5ce9f R14: 00007ff0e98c0300 R15: 0000000000022000 13:12:33 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:12:33 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:12:33 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {0x0}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:12:33 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {0x0}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:12:33 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {0x0}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:12:33 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:12:33 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r2, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:12:33 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) [ 2326.251869] FAULT_INJECTION: forcing a failure. [ 2326.251869] name failslab, interval 1, probability 0, space 0, times 0 [ 2326.253220] CPU: 0 PID: 12354 Comm: syz-executor.5 Not tainted 5.10.175 #1 [ 2326.253953] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2326.254834] Call Trace: [ 2326.255117] dump_stack+0x107/0x167 [ 2326.255504] should_fail.cold+0x5/0xa [ 2326.255909] ? create_object.isra.0+0x3a/0xa20 [ 2326.256402] should_failslab+0x5/0x20 [ 2326.256811] kmem_cache_alloc+0x5b/0x360 [ 2326.257251] ? mark_held_locks+0x9e/0xe0 [ 2326.257696] create_object.isra.0+0x3a/0xa20 [ 2326.258156] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2326.258692] kmem_cache_alloc_bulk+0x168/0x320 [ 2326.259184] io_submit_sqes+0x7099/0x86e0 [ 2326.259646] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2326.260195] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2326.260709] ? lock_downgrade+0x6d0/0x6d0 [ 2326.261150] ? find_held_lock+0x2c/0x110 [ 2326.261590] ? io_submit_sqes+0x86e0/0x86e0 [ 2326.262055] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2326.262566] ? wait_for_completion_io+0x270/0x270 [ 2326.263084] ? rcu_read_lock_any_held+0x75/0xa0 [ 2326.263576] ? vfs_write+0x354/0xa70 [ 2326.263973] ? fput_many+0x2f/0x1a0 [ 2326.264368] ? ksys_write+0x1a9/0x260 [ 2326.264782] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2326.265336] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2326.265894] do_syscall_64+0x33/0x40 [ 2326.266288] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2326.266838] RIP: 0033:0x7f0434711b19 [ 2326.267234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2326.269187] RSP: 002b:00007f0431c87188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2326.269991] RAX: ffffffffffffffda RBX: 00007f0434824f60 RCX: 00007f0434711b19 [ 2326.270747] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2326.271511] RBP: 00007f0431c871d0 R08: 0000000000000000 R09: 0000000000000000 [ 2326.272282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2326.273050] R13: 00007ffd8b38596f R14: 00007f0431c87300 R15: 0000000000022000 [ 2326.290350] FAULT_INJECTION: forcing a failure. [ 2326.290350] name failslab, interval 1, probability 0, space 0, times 0 [ 2326.292974] CPU: 1 PID: 12367 Comm: syz-executor.7 Not tainted 5.10.175 #1 [ 2326.294454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2326.296220] Call Trace: [ 2326.296790] dump_stack+0x107/0x167 [ 2326.297582] should_fail.cold+0x5/0xa [ 2326.298414] ? create_object.isra.0+0x3a/0xa20 [ 2326.299407] should_failslab+0x5/0x20 [ 2326.300260] kmem_cache_alloc+0x5b/0x360 [ 2326.301140] ? mark_held_locks+0x9e/0xe0 [ 2326.302024] create_object.isra.0+0x3a/0xa20 [ 2326.302975] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2326.304073] kmem_cache_alloc_bulk+0x168/0x320 [ 2326.305078] io_submit_sqes+0x7099/0x86e0 [ 2326.305969] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2326.307039] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2326.308097] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2326.309148] ? lock_downgrade+0x6d0/0x6d0 [ 2326.310032] ? find_held_lock+0x2c/0x110 13:12:33 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) [ 2326.310912] ? io_submit_sqes+0x86e0/0x86e0 [ 2326.311983] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2326.313050] ? wait_for_completion_io+0x270/0x270 [ 2326.314093] ? rcu_read_lock_any_held+0x75/0xa0 [ 2326.315085] ? vfs_write+0x354/0xa70 [ 2326.315893] ? fput_many+0x2f/0x1a0 [ 2326.316685] ? ksys_write+0x1a9/0x260 [ 2326.317512] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2326.318631] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2326.319748] do_syscall_64+0x33/0x40 [ 2326.320579] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2326.321680] RIP: 0033:0x7ff0ec34ab19 [ 2326.322489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2326.326446] RSP: 002b:00007ff0e98c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2326.328059] RAX: ffffffffffffffda RBX: 00007ff0ec45df60 RCX: 00007ff0ec34ab19 [ 2326.329611] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2326.331122] RBP: 00007ff0e98c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2326.332657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2326.334167] R13: 00007ffe29f5ce9f R14: 00007ff0e98c0300 R15: 0000000000022000 13:12:33 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r2, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:12:33 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:12:33 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) [ 2326.490940] FAULT_INJECTION: forcing a failure. [ 2326.490940] name failslab, interval 1, probability 0, space 0, times 0 [ 2326.492239] CPU: 0 PID: 12385 Comm: syz-executor.5 Not tainted 5.10.175 #1 [ 2326.492982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2326.493851] Call Trace: [ 2326.494142] dump_stack+0x107/0x167 [ 2326.494537] should_fail.cold+0x5/0xa [ 2326.494957] ? create_object.isra.0+0x3a/0xa20 [ 2326.495446] should_failslab+0x5/0x20 [ 2326.495862] kmem_cache_alloc+0x5b/0x360 [ 2326.496317] ? mark_held_locks+0x9e/0xe0 [ 2326.496760] create_object.isra.0+0x3a/0xa20 [ 2326.497225] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2326.497767] kmem_cache_alloc_bulk+0x168/0x320 [ 2326.498261] io_submit_sqes+0x7099/0x86e0 [ 2326.498705] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2326.499233] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2326.499765] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2326.500283] ? lock_downgrade+0x6d0/0x6d0 [ 2326.500722] ? find_held_lock+0x2c/0x110 [ 2326.501153] ? io_submit_sqes+0x86e0/0x86e0 [ 2326.501624] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2326.502136] ? irqentry_enter+0x26/0x60 [ 2326.502562] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2326.503116] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2326.503695] ? trace_hardirqs_on+0x5b/0x180 [ 2326.504155] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2326.504737] ? __io_uring_cancel+0x20/0x20 [ 2326.505192] do_syscall_64+0x33/0x40 [ 2326.505587] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2326.506133] RIP: 0033:0x7f0434711b19 [ 2326.506531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2326.508485] RSP: 002b:00007f0431c87188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2326.509296] RAX: ffffffffffffffda RBX: 00007f0434824f60 RCX: 00007f0434711b19 [ 2326.510049] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2326.510802] RBP: 00007f0431c871d0 R08: 0000000000000000 R09: 0000000000000000 [ 2326.511555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2326.512311] R13: 00007ffd8b38596f R14: 00007f0431c87300 R15: 0000000000022000 13:12:33 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r2, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:12:33 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000015c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:12:33 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) 13:12:33 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) [ 2326.819294] FAULT_INJECTION: forcing a failure. [ 2326.819294] name failslab, interval 1, probability 0, space 0, times 0 [ 2326.822150] CPU: 1 PID: 12404 Comm: syz-executor.5 Not tainted 5.10.175 #1 [ 2326.823622] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2326.825399] Call Trace: [ 2326.825965] dump_stack+0x107/0x167 [ 2326.826750] should_fail.cold+0x5/0xa [ 2326.827567] ? create_object.isra.0+0x3a/0xa20 [ 2326.828556] should_failslab+0x5/0x20 [ 2326.829371] kmem_cache_alloc+0x5b/0x360 [ 2326.830242] ? mark_held_locks+0x9e/0xe0 [ 2326.831117] create_object.isra.0+0x3a/0xa20 [ 2326.832059] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2326.833172] kmem_cache_alloc_bulk+0x168/0x320 [ 2326.834160] io_submit_sqes+0x7099/0x86e0 [ 2326.835055] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2326.836120] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2326.837191] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2326.838227] ? lock_downgrade+0x6d0/0x6d0 [ 2326.839110] ? find_held_lock+0x2c/0x110 [ 2326.839986] ? io_submit_sqes+0x86e0/0x86e0 [ 2326.840931] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2326.841968] ? wait_for_completion_io+0x270/0x270 [ 2326.843004] ? rcu_read_lock_any_held+0x75/0xa0 [ 2326.843998] ? vfs_write+0x354/0xa70 [ 2326.844816] ? fput_many+0x2f/0x1a0 [ 2326.845598] ? ksys_write+0x1a9/0x260 [ 2326.846428] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2326.847546] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2326.848665] do_syscall_64+0x33/0x40 [ 2326.849468] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2326.850563] RIP: 0033:0x7f0434711b19 [ 2326.851360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2326.855291] RSP: 002b:00007f0431c87188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2326.856938] RAX: ffffffffffffffda RBX: 00007f0434824f60 RCX: 00007f0434711b19 [ 2326.858463] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2326.859986] RBP: 00007f0431c871d0 R08: 0000000000000000 R09: 0000000000000000 [ 2326.861514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2326.863037] R13: 00007ffd8b38596f R14: 00007f0431c87300 R15: 0000000000022000 13:12:47 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:12:47 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:12:47 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {0x0}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:12:47 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) 13:12:47 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:12:47 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000015c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:12:47 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:12:47 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) [ 2340.153525] FAULT_INJECTION: forcing a failure. [ 2340.153525] name failslab, interval 1, probability 0, space 0, times 0 [ 2340.155250] CPU: 1 PID: 12429 Comm: syz-executor.5 Not tainted 5.10.175 #1 [ 2340.156307] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2340.157585] Call Trace: [ 2340.157994] dump_stack+0x107/0x167 [ 2340.158558] should_fail.cold+0x5/0xa [ 2340.159141] ? create_object.isra.0+0x3a/0xa20 [ 2340.159837] should_failslab+0x5/0x20 [ 2340.160428] kmem_cache_alloc+0x5b/0x360 [ 2340.161056] ? mark_held_locks+0x9e/0xe0 [ 2340.161679] create_object.isra.0+0x3a/0xa20 [ 2340.162349] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2340.163133] kmem_cache_alloc_bulk+0x168/0x320 [ 2340.163800] io_submit_sqes+0x7099/0x86e0 [ 2340.164443] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2340.165202] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2340.165955] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2340.166678] ? lock_downgrade+0x6d0/0x6d0 [ 2340.167166] FAULT_INJECTION: forcing a failure. [ 2340.167166] name failslab, interval 1, probability 0, space 0, times 0 [ 2340.167300] ? find_held_lock+0x2c/0x110 [ 2340.167320] ? io_submit_sqes+0x86e0/0x86e0 [ 2340.167345] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2340.171792] ? wait_for_completion_io+0x270/0x270 [ 2340.172534] ? rcu_read_lock_any_held+0x75/0xa0 [ 2340.173226] ? vfs_write+0x354/0xa70 [ 2340.173787] ? fput_many+0x2f/0x1a0 [ 2340.174339] ? ksys_write+0x1a9/0x260 [ 2340.174914] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2340.175694] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2340.176473] do_syscall_64+0x33/0x40 [ 2340.177033] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2340.177802] RIP: 0033:0x7f0434711b19 [ 2340.178364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2340.181139] RSP: 002b:00007f0431c87188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2340.182310] RAX: ffffffffffffffda RBX: 00007f0434824f60 RCX: 00007f0434711b19 [ 2340.183373] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2340.184455] RBP: 00007f0431c871d0 R08: 0000000000000000 R09: 0000000000000000 [ 2340.185525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2340.186590] R13: 00007ffd8b38596f R14: 00007f0431c87300 R15: 0000000000022000 [ 2340.187640] CPU: 0 PID: 12427 Comm: syz-executor.7 Not tainted 5.10.175 #1 [ 2340.189243] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2340.191151] Call Trace: [ 2340.191756] dump_stack+0x107/0x167 [ 2340.192602] should_fail.cold+0x5/0xa [ 2340.193474] ? create_object.isra.0+0x3a/0xa20 [ 2340.194520] should_failslab+0x5/0x20 [ 2340.195386] kmem_cache_alloc+0x5b/0x360 [ 2340.196315] ? mark_held_locks+0x9e/0xe0 [ 2340.197264] create_object.isra.0+0x3a/0xa20 [ 2340.198266] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2340.199424] kmem_cache_alloc_bulk+0x168/0x320 [ 2340.200489] io_submit_sqes+0x7099/0x86e0 [ 2340.201453] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2340.202606] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2340.203741] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2340.204865] ? lock_downgrade+0x6d0/0x6d0 [ 2340.205814] ? find_held_lock+0x2c/0x110 [ 2340.206743] ? io_submit_sqes+0x86e0/0x86e0 [ 2340.207739] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2340.208855] ? wait_for_completion_io+0x270/0x270 [ 2340.209959] ? rcu_read_lock_any_held+0x75/0xa0 [ 2340.211027] ? vfs_write+0x354/0xa70 [ 2340.211878] ? fput_many+0x2f/0x1a0 [ 2340.212737] ? ksys_write+0x1a9/0x260 [ 2340.213617] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2340.214803] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2340.215980] do_syscall_64+0x33/0x40 [ 2340.216844] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2340.218005] RIP: 0033:0x7ff0ec34ab19 [ 2340.218853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2340.223029] RSP: 002b:00007ff0e98c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2340.224777] RAX: ffffffffffffffda RBX: 00007ff0ec45df60 RCX: 00007ff0ec34ab19 [ 2340.226397] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2340.228021] RBP: 00007ff0e98c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2340.229654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2340.231279] R13: 00007ffe29f5ce9f R14: 00007ff0e98c0300 R15: 0000000000022000 13:13:02 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) 13:13:02 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:13:02 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:13:02 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:13:02 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:13:02 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:13:02 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {0x0}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:13:02 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000015c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) [ 2355.728598] FAULT_INJECTION: forcing a failure. [ 2355.728598] name failslab, interval 1, probability 0, space 0, times 0 [ 2355.731176] CPU: 0 PID: 12453 Comm: syz-executor.5 Not tainted 5.10.175 #1 [ 2355.732588] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2355.734274] Call Trace: [ 2355.734818] dump_stack+0x107/0x167 [ 2355.735563] should_fail.cold+0x5/0xa [ 2355.736334] ? create_object.isra.0+0x3a/0xa20 [ 2355.737267] should_failslab+0x5/0x20 [ 2355.738039] kmem_cache_alloc+0x5b/0x360 [ 2355.738861] ? mark_held_locks+0x9e/0xe0 [ 2355.739684] create_object.isra.0+0x3a/0xa20 [ 2355.740596] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2355.741624] kmem_cache_alloc_bulk+0x168/0x320 [ 2355.742559] io_submit_sqes+0x7099/0x86e0 [ 2355.743412] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2355.744411] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2355.745433] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2355.746405] ? lock_downgrade+0x6d0/0x6d0 [ 2355.747234] ? find_held_lock+0x2c/0x110 [ 2355.748058] ? io_submit_sqes+0x86e0/0x86e0 [ 2355.748945] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2355.749919] ? wait_for_completion_io+0x270/0x270 [ 2355.750895] ? rcu_read_lock_any_held+0x75/0xa0 [ 2355.751824] ? vfs_write+0x354/0xa70 [ 2355.752597] ? fput_many+0x2f/0x1a0 [ 2355.753335] ? ksys_write+0x1a9/0x260 [ 2355.754111] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2355.755161] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2355.756204] do_syscall_64+0x33/0x40 [ 2355.756953] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2355.757988] RIP: 0033:0x7f0434711b19 [ 2355.758727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2355.762403] RSP: 002b:00007f0431c87188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2355.763926] RAX: ffffffffffffffda RBX: 00007f0434824f60 RCX: 00007f0434711b19 [ 2355.765366] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2355.766793] RBP: 00007f0431c871d0 R08: 0000000000000000 R09: 0000000000000000 [ 2355.768220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2355.769658] R13: 00007ffd8b38596f R14: 00007f0431c87300 R15: 0000000000022000 [ 2355.799428] FAULT_INJECTION: forcing a failure. [ 2355.799428] name failslab, interval 1, probability 0, space 0, times 0 [ 2355.802521] CPU: 0 PID: 12461 Comm: syz-executor.7 Not tainted 5.10.175 #1 [ 2355.803915] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2355.805587] Call Trace: [ 2355.806127] dump_stack+0x107/0x167 [ 2355.806872] should_fail.cold+0x5/0xa [ 2355.807638] ? create_object.isra.0+0x3a/0xa20 [ 2355.808561] ? create_object.isra.0+0x3a/0xa20 [ 2355.809524] should_failslab+0x5/0x20 [ 2355.810294] kmem_cache_alloc+0x5b/0x360 [ 2355.811122] create_object.isra.0+0x3a/0xa20 [ 2355.812011] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2355.813056] kmem_cache_alloc_bulk+0x168/0x320 [ 2355.813989] io_submit_sqes+0x7099/0x86e0 [ 2355.814835] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2355.815838] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2355.816860] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2355.817843] ? lock_downgrade+0x6d0/0x6d0 [ 2355.818678] ? find_held_lock+0x2c/0x110 [ 2355.819504] ? io_submit_sqes+0x86e0/0x86e0 [ 2355.820393] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2355.821386] ? wait_for_completion_io+0x270/0x270 [ 2355.822370] ? rcu_read_lock_any_held+0x75/0xa0 [ 2355.823304] ? vfs_write+0x354/0xa70 [ 2355.824069] ? fput_many+0x2f/0x1a0 [ 2355.824824] ? ksys_write+0x1a9/0x260 [ 2355.825605] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2355.826665] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2355.827713] do_syscall_64+0x33/0x40 [ 2355.828465] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2355.829706] RIP: 0033:0x7ff0ec34ab19 [ 2355.830459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2355.834825] RSP: 002b:00007ff0e98c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2355.836340] RAX: ffffffffffffffda RBX: 00007ff0ec45df60 RCX: 00007ff0ec34ab19 [ 2355.838044] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2355.839469] RBP: 00007ff0e98c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2355.841174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2355.842590] R13: 00007ffe29f5ce9f R14: 00007ff0e98c0300 R15: 0000000000022000 13:13:03 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:13:03 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:13:03 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:13:03 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:13:03 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {0x0}, {&(0x7f00000015c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:13:03 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:13:03 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) [ 2356.203322] FAULT_INJECTION: forcing a failure. [ 2356.203322] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 2356.206070] CPU: 0 PID: 12485 Comm: syz-executor.5 Not tainted 5.10.175 #1 [ 2356.207542] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2356.209306] Call Trace: [ 2356.209877] dump_stack+0x107/0x167 [ 2356.210656] should_fail.cold+0x5/0xa [ 2356.211472] _copy_from_user+0x2e/0x1b0 [ 2356.212322] __copy_msghdr_from_user+0x91/0x4b0 [ 2356.213323] ? __ia32_sys_shutdown+0x80/0x80 [ 2356.214253] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2356.215370] ? SOFTIRQ_verbose+0x10/0x10 [ 2356.216257] __io_recvmsg_copy_hdr+0xac/0x2f0 [ 2356.216692] FAULT_INJECTION: forcing a failure. [ 2356.216692] name failslab, interval 1, probability 0, space 0, times 0 [ 2356.217225] ? __io_compat_recvmsg_copy_hdr+0x360/0x360 [ 2356.217242] ? lock_chain_count+0x20/0x20 [ 2356.217271] ? __is_insn_slot_addr+0x123/0x290 [ 2356.222352] ? lock_downgrade+0x6d0/0x6d0 [ 2356.223233] io_recvmsg+0xa31/0xca0 [ 2356.224007] ? io_sendmsg+0x790/0x790 [ 2356.224836] ? mark_lock+0xf5/0x2df0 [ 2356.225627] ? lock_chain_count+0x20/0x20 [ 2356.226508] ? lock_chain_count+0x20/0x20 [ 2356.227379] ? stack_trace_save+0x8c/0xc0 [ 2356.228248] ? stack_trace_consume_entry+0x160/0x160 [ 2356.229354] ? __lock_acquire+0xbb1/0x5b00 [ 2356.230250] io_issue_sqe+0x35f1/0x7660 [ 2356.231097] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2356.232191] ? SOFTIRQ_verbose+0x10/0x10 [ 2356.233072] ? lock_chain_count+0x20/0x20 [ 2356.233947] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2356.235051] ? io_connect+0x610/0x610 [ 2356.235853] ? find_held_lock+0x2c/0x110 [ 2356.236728] ? __fget_files+0x26d/0x4c0 [ 2356.237565] ? lock_downgrade+0x6d0/0x6d0 [ 2356.238444] __io_queue_sqe+0x90/0xa60 [ 2356.239268] ? io_timeout_prep+0x8b0/0x8b0 [ 2356.240180] io_submit_sqes+0x4279/0x86e0 [ 2356.241101] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2356.242143] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2356.243166] ? lock_downgrade+0x6d0/0x6d0 [ 2356.244032] ? find_held_lock+0x2c/0x110 [ 2356.244919] ? io_submit_sqes+0x86e0/0x86e0 [ 2356.245840] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2356.246856] ? wait_for_completion_io+0x270/0x270 [ 2356.247872] ? rcu_read_lock_any_held+0x75/0xa0 [ 2356.248858] ? vfs_write+0x354/0xa70 [ 2356.249643] ? fput_many+0x2f/0x1a0 [ 2356.250406] ? ksys_write+0x1a9/0x260 [ 2356.251215] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2356.252313] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2356.253410] do_syscall_64+0x33/0x40 [ 2356.254194] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2356.255267] RIP: 0033:0x7f0434711b19 [ 2356.256054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2356.259907] RSP: 002b:00007f0431c87188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2356.261510] RAX: ffffffffffffffda RBX: 00007f0434824f60 RCX: 00007f0434711b19 [ 2356.263001] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2356.264488] RBP: 00007f0431c871d0 R08: 0000000000000000 R09: 0000000000000000 [ 2356.265926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2356.267333] R13: 00007ffd8b38596f R14: 00007f0431c87300 R15: 0000000000022000 [ 2356.268829] CPU: 1 PID: 12483 Comm: syz-executor.1 Not tainted 5.10.175 #1 [ 2356.270292] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2356.272029] Call Trace: [ 2356.272608] dump_stack+0x107/0x167 [ 2356.273401] should_fail.cold+0x5/0xa [ 2356.274216] should_failslab+0x5/0x20 [ 2356.275018] kmem_cache_alloc_bulk+0x4b/0x320 [ 2356.275967] io_submit_sqes+0x7099/0x86e0 [ 2356.276863] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2356.277907] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2356.278952] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2356.279975] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2356.280933] ? _raw_spin_unlock_irq+0x27/0x30 [ 2356.281910] ? io_submit_sqes+0x86e0/0x86e0 [ 2356.282828] ? finish_task_switch+0x126/0x5d0 [ 2356.283768] ? finish_task_switch+0xef/0x5d0 [ 2356.284711] ? __switch_to+0x572/0x1000 [ 2356.285547] ? __switch_to_asm+0x3a/0x60 [ 2356.286396] ? __switch_to_asm+0x34/0x60 [ 2356.287254] ? __schedule+0x82c/0x1f00 [ 2356.288088] ? io_schedule_timeout+0x140/0x140 [ 2356.289060] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2356.290052] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2356.291210] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2356.292305] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2356.293400] do_syscall_64+0x33/0x40 [ 2356.294184] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2356.295255] RIP: 0033:0x7f7740d7eb19 [ 2356.296035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2356.299877] RSP: 002b:00007f773e2f4188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2356.301478] RAX: ffffffffffffffda RBX: 00007f7740e91f60 RCX: 00007f7740d7eb19 [ 2356.302962] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2356.304449] RBP: 00007f773e2f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2356.305945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2356.307432] R13: 00007ffd25bf08cf R14: 00007f773e2f4300 R15: 0000000000022000 [ 2356.420161] FAULT_INJECTION: forcing a failure. [ 2356.420161] name failslab, interval 1, probability 0, space 0, times 0 [ 2356.423145] CPU: 0 PID: 12491 Comm: syz-executor.7 Not tainted 5.10.175 #1 [ 2356.424807] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2356.426470] Call Trace: [ 2356.427097] dump_stack+0x107/0x167 [ 2356.427840] should_fail.cold+0x5/0xa [ 2356.428767] ? create_object.isra.0+0x3a/0xa20 [ 2356.429697] should_failslab+0x5/0x20 [ 2356.430603] kmem_cache_alloc+0x5b/0x360 [ 2356.431431] ? mark_held_locks+0x9e/0xe0 [ 2356.432401] create_object.isra.0+0x3a/0xa20 [ 2356.433294] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2356.434505] kmem_cache_alloc_bulk+0x168/0x320 [ 2356.435431] io_submit_sqes+0x7099/0x86e0 [ 2356.436421] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2356.437429] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2356.438607] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2356.439576] ? lock_downgrade+0x6d0/0x6d0 [ 2356.440555] ? find_held_lock+0x2c/0x110 [ 2356.441378] ? io_submit_sqes+0x86e0/0x86e0 [ 2356.442252] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2356.443211] ? wait_for_completion_io+0x270/0x270 [ 2356.444173] ? rcu_read_lock_any_held+0x75/0xa0 [ 2356.445106] ? vfs_write+0x354/0xa70 [ 2356.445848] ? fput_many+0x2f/0x1a0 [ 2356.446571] ? ksys_write+0x1a9/0x260 [ 2356.447342] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2356.448382] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2356.449434] do_syscall_64+0x33/0x40 [ 2356.450177] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2356.451199] RIP: 0033:0x7ff0ec34ab19 [ 2356.451939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2356.455596] RSP: 002b:00007ff0e98c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2356.457233] RAX: ffffffffffffffda RBX: 00007ff0ec45df60 RCX: 00007ff0ec34ab19 [ 2356.458646] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2356.460057] RBP: 00007ff0e98c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2356.461481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2356.462893] R13: 00007ffe29f5ce9f R14: 00007ff0e98c0300 R15: 0000000000022000 13:13:03 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:13:03 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:13:03 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:13:03 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:13:03 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:13:04 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) [ 2356.765232] FAULT_INJECTION: forcing a failure. [ 2356.765232] name failslab, interval 1, probability 0, space 0, times 0 [ 2356.768080] CPU: 1 PID: 12502 Comm: syz-executor.5 Not tainted 5.10.175 #1 [ 2356.769559] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2356.771322] Call Trace: [ 2356.771898] dump_stack+0x107/0x167 [ 2356.772716] should_fail.cold+0x5/0xa [ 2356.773535] ? iovec_from_user+0x36c/0x400 [ 2356.774484] should_failslab+0x5/0x20 [ 2356.775328] __kmalloc+0x72/0x330 [ 2356.776097] ? _copy_from_user+0xfb/0x1b0 [ 2356.777027] iovec_from_user+0x36c/0x400 [ 2356.777931] __import_iovec+0x67/0x590 [ 2356.778811] __io_recvmsg_copy_hdr+0x26d/0x2f0 [ 2356.779831] ? __io_compat_recvmsg_copy_hdr+0x360/0x360 [ 2356.781011] ? lock_chain_count+0x20/0x20 [ 2356.781935] ? __is_insn_slot_addr+0x123/0x290 [ 2356.782942] ? lock_downgrade+0x6d0/0x6d0 [ 2356.783870] io_recvmsg+0xa31/0xca0 [ 2356.784702] ? io_sendmsg+0x790/0x790 [ 2356.785573] ? mark_lock+0xf5/0x2df0 [ 2356.786427] ? mark_lock+0x1/0x2df0 [ 2356.787275] ? stack_trace_consume_entry+0x160/0x160 [ 2356.788451] ? __lock_acquire+0xbb1/0x5b00 [ 2356.789416] io_issue_sqe+0x35f1/0x7660 [ 2356.790325] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2356.791502] ? SOFTIRQ_verbose+0x10/0x10 [ 2356.792435] ? lock_chain_count+0x20/0x20 [ 2356.793370] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2356.794546] ? io_connect+0x610/0x610 [ 2356.795422] ? find_held_lock+0x2c/0x110 [ 2356.796344] ? __fget_files+0x26d/0x4c0 [ 2356.797252] ? lock_downgrade+0x6d0/0x6d0 [ 2356.798205] __io_queue_sqe+0x90/0xa60 [ 2356.799086] ? io_timeout_prep+0x8b0/0x8b0 [ 2356.800064] io_submit_sqes+0x4279/0x86e0 [ 2356.801047] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2356.802167] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2356.803254] ? lock_downgrade+0x6d0/0x6d0 [ 2356.804179] ? find_held_lock+0x2c/0x110 [ 2356.805099] ? io_submit_sqes+0x86e0/0x86e0 [ 2356.806074] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2356.807150] ? wait_for_completion_io+0x270/0x270 [ 2356.808225] ? rcu_read_lock_any_held+0x75/0xa0 [ 2356.809313] ? vfs_write+0x354/0xa70 [ 2356.810146] ? fput_many+0x2f/0x1a0 [ 2356.810962] ? ksys_write+0x1a9/0x260 [ 2356.811823] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2356.812992] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2356.814148] do_syscall_64+0x33/0x40 [ 2356.814980] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2356.816118] RIP: 0033:0x7f0434711b19 [ 2356.816966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2356.821058] RSP: 002b:00007f0431c87188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2356.822753] RAX: ffffffffffffffda RBX: 00007f0434824f60 RCX: 00007f0434711b19 [ 2356.824343] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2356.825944] RBP: 00007f0431c871d0 R08: 0000000000000000 R09: 0000000000000000 [ 2356.827501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2356.829062] R13: 00007ffd8b38596f R14: 00007f0431c87300 R15: 0000000000022000 13:13:19 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:13:19 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:13:19 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:13:19 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{0x0}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:13:19 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {0x0}, {&(0x7f00000015c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:13:19 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:13:19 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:13:19 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:13:19 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) [ 2372.242542] FAULT_INJECTION: forcing a failure. [ 2372.242542] name failslab, interval 1, probability 0, space 0, times 0 [ 2372.243881] CPU: 1 PID: 12538 Comm: syz-executor.1 Not tainted 5.10.175 #1 [ 2372.244657] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2372.245542] Call Trace: [ 2372.245832] dump_stack+0x107/0x167 [ 2372.246233] should_fail.cold+0x5/0xa [ 2372.246639] ? create_object.isra.0+0x3a/0xa20 [ 2372.247137] should_failslab+0x5/0x20 [ 2372.247537] kmem_cache_alloc+0x5b/0x360 [ 2372.247969] create_object.isra.0+0x3a/0xa20 [ 2372.248430] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2372.248984] kmem_cache_alloc_bulk+0x168/0x320 [ 2372.249475] io_submit_sqes+0x7099/0x86e0 [ 2372.249913] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2372.250441] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2372.250970] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2372.251479] ? lock_downgrade+0x6d0/0x6d0 [ 2372.251917] ? find_held_lock+0x2c/0x110 [ 2372.252348] ? io_submit_sqes+0x86e0/0x86e0 [ 2372.252831] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2372.253353] ? wait_for_completion_io+0x270/0x270 [ 2372.253863] ? rcu_read_lock_any_held+0x75/0xa0 [ 2372.254372] ? vfs_write+0x354/0xa70 [ 2372.254774] ? fput_many+0x2f/0x1a0 [ 2372.255177] ? ksys_write+0x1a9/0x260 [ 2372.255603] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2372.256166] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2372.256723] do_syscall_64+0x33/0x40 [ 2372.257139] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2372.257697] RIP: 0033:0x7f7740d7eb19 [ 2372.258101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2372.260064] RSP: 002b:00007f773e2f4188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2372.260894] RAX: ffffffffffffffda RBX: 00007f7740e91f60 RCX: 00007f7740d7eb19 [ 2372.261653] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2372.262414] RBP: 00007f773e2f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2372.263164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2372.263918] R13: 00007ffd25bf08cf R14: 00007f773e2f4300 R15: 0000000000022000 [ 2372.268829] FAULT_INJECTION: forcing a failure. [ 2372.268829] name failslab, interval 1, probability 0, space 0, times 0 [ 2372.270114] CPU: 1 PID: 12540 Comm: syz-executor.5 Not tainted 5.10.175 #1 [ 2372.270857] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2372.271744] Call Trace: [ 2372.272038] dump_stack+0x107/0x167 [ 2372.272436] should_fail.cold+0x5/0xa [ 2372.272856] ? create_object.isra.0+0x3a/0xa20 [ 2372.273202] FAULT_INJECTION: forcing a failure. [ 2372.273202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2372.273354] should_failslab+0x5/0x20 [ 2372.275023] kmem_cache_alloc+0x5b/0x360 [ 2372.275470] create_object.isra.0+0x3a/0xa20 [ 2372.275957] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2372.276499] __kmalloc+0x16e/0x330 [ 2372.276889] iovec_from_user+0x36c/0x400 [ 2372.277330] __import_iovec+0x67/0x590 [ 2372.277756] __io_recvmsg_copy_hdr+0x26d/0x2f0 [ 2372.278258] ? __io_compat_recvmsg_copy_hdr+0x360/0x360 [ 2372.278824] ? lock_chain_count+0x20/0x20 [ 2372.279274] ? __is_insn_slot_addr+0x123/0x290 [ 2372.279763] ? lock_downgrade+0x6d0/0x6d0 [ 2372.280214] ? mark_lock+0xf5/0x2df0 [ 2372.280615] io_recvmsg+0xa31/0xca0 [ 2372.281018] ? lock_chain_count+0x20/0x20 [ 2372.281466] ? io_sendmsg+0x790/0x790 [ 2372.281881] ? mark_lock+0xf5/0x2df0 [ 2372.282278] ? mark_lock+0xf5/0x2df0 [ 2372.282689] ? mark_held_locks+0x9e/0xe0 [ 2372.283133] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2372.283683] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2372.284264] ? trace_hardirqs_on+0x5b/0x180 [ 2372.284731] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2372.285319] ? __sanitizer_cov_trace_switch+0xe/0x80 [ 2372.285879] io_issue_sqe+0x35f1/0x7660 [ 2372.286323] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2372.286883] ? SOFTIRQ_verbose+0x10/0x10 [ 2372.287323] ? lock_chain_count+0x20/0x20 [ 2372.287775] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2372.288331] ? io_connect+0x610/0x610 [ 2372.288745] ? find_held_lock+0x2c/0x110 [ 2372.289194] ? __fget_files+0x26d/0x4c0 [ 2372.289624] ? lock_downgrade+0x6d0/0x6d0 [ 2372.290076] __io_queue_sqe+0x90/0xa60 [ 2372.290501] ? io_timeout_prep+0x8b0/0x8b0 [ 2372.290971] io_submit_sqes+0x4279/0x86e0 [ 2372.291433] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2372.291971] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2372.292491] ? lock_downgrade+0x6d0/0x6d0 [ 2372.292954] ? find_held_lock+0x2c/0x110 [ 2372.293391] ? io_submit_sqes+0x86e0/0x86e0 [ 2372.293863] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2372.294385] ? wait_for_completion_io+0x270/0x270 [ 2372.294906] ? rcu_read_lock_any_held+0x75/0xa0 [ 2372.295400] ? vfs_write+0x354/0xa70 [ 2372.295805] ? fput_many+0x2f/0x1a0 [ 2372.296203] ? ksys_write+0x1a9/0x260 [ 2372.296618] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2372.297199] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2372.297752] do_syscall_64+0x33/0x40 [ 2372.298156] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2372.298695] RIP: 0033:0x7f0434711b19 [ 2372.299101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2372.301058] RSP: 002b:00007f0431c87188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2372.301864] RAX: ffffffffffffffda RBX: 00007f0434824f60 RCX: 00007f0434711b19 [ 2372.302620] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2372.303382] RBP: 00007f0431c871d0 R08: 0000000000000000 R09: 0000000000000000 [ 2372.304144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2372.304914] R13: 00007ffd8b38596f R14: 00007f0431c87300 R15: 0000000000022000 [ 2372.305692] CPU: 0 PID: 12542 Comm: syz-executor.7 Not tainted 5.10.175 #1 [ 2372.306446] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2372.307334] Call Trace: [ 2372.307622] dump_stack+0x107/0x167 [ 2372.308027] should_fail.cold+0x5/0xa [ 2372.308440] _copy_from_user+0x2e/0x1b0 [ 2372.308879] __copy_msghdr_from_user+0x91/0x4b0 [ 2372.309380] ? __ia32_sys_shutdown+0x80/0x80 [ 2372.309846] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2372.310405] ? SOFTIRQ_verbose+0x10/0x10 [ 2372.310841] __io_recvmsg_copy_hdr+0xac/0x2f0 [ 2372.311381] ? __io_compat_recvmsg_copy_hdr+0x360/0x360 [ 2372.312117] ? lock_chain_count+0x20/0x20 [ 2372.312694] ? __is_insn_slot_addr+0x123/0x290 [ 2372.313335] ? lock_downgrade+0x6d0/0x6d0 [ 2372.313925] io_recvmsg+0xa31/0xca0 [ 2372.314369] ? io_sendmsg+0x790/0x790 [ 2372.314788] ? mark_lock+0xf5/0x2df0 [ 2372.315191] ? lock_chain_count+0x20/0x20 [ 2372.315651] ? lock_chain_count+0x20/0x20 [ 2372.316090] ? stack_trace_save+0x8c/0xc0 [ 2372.316541] ? stack_trace_consume_entry+0x160/0x160 [ 2372.317104] ? __lock_acquire+0xbb1/0x5b00 [ 2372.317572] io_issue_sqe+0x35f1/0x7660 [ 2372.318001] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2372.318596] ? SOFTIRQ_verbose+0x10/0x10 [ 2372.319031] ? lock_chain_count+0x20/0x20 [ 2372.319502] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2372.320058] ? io_connect+0x610/0x610 [ 2372.320475] ? find_held_lock+0x2c/0x110 [ 2372.320915] ? __fget_files+0x26d/0x4c0 [ 2372.321356] ? lock_downgrade+0x6d0/0x6d0 [ 2372.321789] __io_queue_sqe+0x90/0xa60 [ 2372.322210] ? io_timeout_prep+0x8b0/0x8b0 [ 2372.322693] io_submit_sqes+0x4484/0x86e0 [ 2372.323152] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2372.323665] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2372.324188] ? lock_downgrade+0x6d0/0x6d0 [ 2372.324625] ? find_held_lock+0x2c/0x110 [ 2372.325084] ? io_submit_sqes+0x86e0/0x86e0 [ 2372.325536] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2372.326047] ? wait_for_completion_io+0x270/0x270 [ 2372.326547] ? rcu_read_lock_any_held+0x75/0xa0 [ 2372.327073] ? vfs_write+0x354/0xa70 [ 2372.327466] ? fput_many+0x2f/0x1a0 [ 2372.327862] ? ksys_write+0x1a9/0x260 [ 2372.328253] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2372.328860] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2372.329410] do_syscall_64+0x33/0x40 [ 2372.329809] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2372.330356] RIP: 0033:0x7ff0ec34ab19 [ 2372.330754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2372.332641] RSP: 002b:00007ff0e98c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2372.333463] RAX: ffffffffffffffda RBX: 00007ff0ec45df60 RCX: 00007ff0ec34ab19 [ 2372.334228] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2372.334979] RBP: 00007ff0e98c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2372.335732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2372.336494] R13: 00007ffe29f5ce9f R14: 00007ff0e98c0300 R15: 0000000000022000 13:13:34 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:13:34 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:13:34 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{0x0}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:13:34 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:13:34 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:13:34 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:13:34 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {0x0}, {&(0x7f00000015c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:13:34 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) [ 2387.803256] FAULT_INJECTION: forcing a failure. [ 2387.803256] name failslab, interval 1, probability 0, space 0, times 0 [ 2387.804363] FAULT_INJECTION: forcing a failure. [ 2387.804363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2387.805692] CPU: 1 PID: 12577 Comm: syz-executor.1 Not tainted 5.10.175 #1 [ 2387.809306] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2387.810975] Call Trace: [ 2387.811514] dump_stack+0x107/0x167 [ 2387.812252] should_fail.cold+0x5/0xa [ 2387.813034] ? create_object.isra.0+0x3a/0xa20 [ 2387.813958] should_failslab+0x5/0x20 [ 2387.814731] kmem_cache_alloc+0x5b/0x360 [ 2387.815551] ? mark_held_locks+0x9e/0xe0 [ 2387.816380] create_object.isra.0+0x3a/0xa20 [ 2387.817285] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2387.818316] kmem_cache_alloc_bulk+0x168/0x320 [ 2387.819252] io_submit_sqes+0x7099/0x86e0 [ 2387.820097] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2387.821108] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2387.822104] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2387.823077] ? lock_downgrade+0x6d0/0x6d0 [ 2387.823911] ? find_held_lock+0x2c/0x110 [ 2387.824734] ? io_submit_sqes+0x86e0/0x86e0 [ 2387.825631] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2387.826606] ? wait_for_completion_io+0x270/0x270 [ 2387.827577] ? rcu_read_lock_any_held+0x75/0xa0 [ 2387.828505] ? vfs_write+0x354/0xa70 [ 2387.829263] ? fput_many+0x2f/0x1a0 [ 2387.829993] ? ksys_write+0x1a9/0x260 [ 2387.830767] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2387.831815] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2387.832855] do_syscall_64+0x33/0x40 [ 2387.833615] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2387.834641] RIP: 0033:0x7f7740d7eb19 [ 2387.835390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2387.839062] RSP: 002b:00007f773e2f4188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2387.840586] RAX: ffffffffffffffda RBX: 00007f7740e91f60 RCX: 00007f7740d7eb19 [ 2387.842031] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2387.843450] RBP: 00007f773e2f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2387.844870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2387.846306] R13: 00007ffd25bf08cf R14: 00007f773e2f4300 R15: 0000000000022000 [ 2387.847776] CPU: 0 PID: 12580 Comm: syz-executor.7 Not tainted 5.10.175 #1 [ 2387.849170] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2387.850823] Call Trace: [ 2387.851350] dump_stack+0x107/0x167 [ 2387.852091] should_fail.cold+0x5/0xa [ 2387.852860] _copy_from_user+0x2e/0x1b0 [ 2387.853676] iovec_from_user+0x141/0x400 [ 2387.854495] __import_iovec+0x67/0x590 [ 2387.855292] __io_recvmsg_copy_hdr+0x26d/0x2f0 [ 2387.856114] FAULT_INJECTION: forcing a failure. [ 2387.856114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2387.856210] ? __io_compat_recvmsg_copy_hdr+0x360/0x360 [ 2387.859508] ? lock_chain_count+0x20/0x20 [ 2387.860338] ? __is_insn_slot_addr+0x123/0x290 [ 2387.861256] ? lock_downgrade+0x6d0/0x6d0 [ 2387.862095] io_recvmsg+0xa31/0xca0 [ 2387.862827] ? io_sendmsg+0x790/0x790 [ 2387.863595] ? mark_lock+0xf5/0x2df0 [ 2387.864364] ? mark_lock+0x1/0x2df0 [ 2387.865118] ? stack_trace_consume_entry+0x160/0x160 [ 2387.866153] ? __lock_acquire+0xbb1/0x5b00 [ 2387.867012] io_issue_sqe+0x35f1/0x7660 [ 2387.867820] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2387.868861] ? SOFTIRQ_verbose+0x10/0x10 [ 2387.869679] ? lock_chain_count+0x20/0x20 [ 2387.870520] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2387.871573] ? io_connect+0x610/0x610 [ 2387.872350] ? find_held_lock+0x2c/0x110 [ 2387.873194] ? __fget_files+0x26d/0x4c0 [ 2387.873995] ? lock_downgrade+0x6d0/0x6d0 [ 2387.874837] __io_queue_sqe+0x90/0xa60 [ 2387.875625] ? io_timeout_prep+0x8b0/0x8b0 [ 2387.876500] io_submit_sqes+0x4484/0x86e0 [ 2387.877384] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2387.878385] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2387.879361] ? lock_downgrade+0x6d0/0x6d0 [ 2387.880195] ? find_held_lock+0x2c/0x110 [ 2387.881036] ? io_submit_sqes+0x86e0/0x86e0 [ 2387.881914] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2387.882891] ? wait_for_completion_io+0x270/0x270 [ 2387.883862] ? rcu_read_lock_any_held+0x75/0xa0 [ 2387.884794] ? vfs_write+0x354/0xa70 [ 2387.885555] ? fput_many+0x2f/0x1a0 [ 2387.886293] ? ksys_write+0x1a9/0x260 [ 2387.887073] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2387.888123] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2387.889178] do_syscall_64+0x33/0x40 [ 2387.889930] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2387.890959] RIP: 0033:0x7ff0ec34ab19 [ 2387.891701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2387.895389] RSP: 002b:00007ff0e98c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2387.896921] RAX: ffffffffffffffda RBX: 00007ff0ec45df60 RCX: 00007ff0ec34ab19 [ 2387.898364] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2387.899794] RBP: 00007ff0e98c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2387.901231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2387.902659] R13: 00007ffe29f5ce9f R14: 00007ff0e98c0300 R15: 0000000000022000 [ 2387.904147] CPU: 1 PID: 12574 Comm: syz-executor.5 Not tainted 5.10.175 #1 [ 2387.905696] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2387.907430] Call Trace: [ 2387.907998] dump_stack+0x107/0x167 [ 2387.908779] should_fail.cold+0x5/0xa [ 2387.909605] _copy_from_user+0x2e/0x1b0 [ 2387.910461] iovec_from_user+0x141/0x400 [ 2387.911335] __import_iovec+0x67/0x590 [ 2387.912188] __io_recvmsg_copy_hdr+0x26d/0x2f0 [ 2387.913172] ? __io_compat_recvmsg_copy_hdr+0x360/0x360 [ 2387.914320] ? lock_chain_count+0x20/0x20 [ 2387.915213] ? __is_insn_slot_addr+0x123/0x290 [ 2387.916197] ? lock_downgrade+0x6d0/0x6d0 [ 2387.917118] io_recvmsg+0xa31/0xca0 [ 2387.917910] ? io_sendmsg+0x790/0x790 [ 2387.918749] ? mark_lock+0xf5/0x2df0 [ 2387.919584] ? mark_lock+0x1/0x2df0 [ 2387.920381] ? stack_trace_consume_entry+0x160/0x160 [ 2387.921516] ? __lock_acquire+0xbb1/0x5b00 [ 2387.922445] io_issue_sqe+0x35f1/0x7660 [ 2387.923318] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2387.924467] ? SOFTIRQ_verbose+0x10/0x10 [ 2387.925370] ? lock_chain_count+0x20/0x20 [ 2387.926287] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2387.927439] ? io_connect+0x610/0x610 [ 2387.928288] ? find_held_lock+0x2c/0x110 [ 2387.929224] ? __fget_files+0x26d/0x4c0 [ 2387.930106] ? lock_downgrade+0x6d0/0x6d0 [ 2387.931040] __io_queue_sqe+0x90/0xa60 [ 2387.931912] ? io_timeout_prep+0x8b0/0x8b0 [ 2387.932873] io_submit_sqes+0x4279/0x86e0 [ 2387.933848] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2387.934974] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2387.936058] ? lock_downgrade+0x6d0/0x6d0 [ 2387.936982] ? find_held_lock+0x2c/0x110 [ 2387.937904] ? io_submit_sqes+0x86e0/0x86e0 [ 2387.938862] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2387.939917] ? wait_for_completion_io+0x270/0x270 [ 2387.940975] ? rcu_read_lock_any_held+0x75/0xa0 [ 2387.942008] ? vfs_write+0x354/0xa70 [ 2387.942806] ? fput_many+0x2f/0x1a0 [ 2387.943541] ? ksys_write+0x1a9/0x260 [ 2387.944321] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2387.945383] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2387.946425] do_syscall_64+0x33/0x40 [ 2387.947177] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2387.948219] RIP: 0033:0x7f0434711b19 [ 2387.948972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2387.952676] RSP: 002b:00007f0431c87188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2387.954226] RAX: ffffffffffffffda RBX: 00007f0434824f60 RCX: 00007f0434711b19 [ 2387.955693] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2387.957223] RBP: 00007f0431c871d0 R08: 0000000000000000 R09: 0000000000000000 [ 2387.958664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2387.960098] R13: 00007ffd8b38596f R14: 00007f0431c87300 R15: 0000000000022000 13:13:35 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:13:35 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:13:35 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:13:35 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:13:35 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) [ 2388.347097] FAULT_INJECTION: forcing a failure. [ 2388.347097] name failslab, interval 1, probability 0, space 0, times 0 [ 2388.349820] CPU: 0 PID: 12598 Comm: syz-executor.1 Not tainted 5.10.175 #1 [ 2388.351202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2388.352875] Call Trace: [ 2388.353417] dump_stack+0x107/0x167 [ 2388.354169] should_fail.cold+0x5/0xa [ 2388.354937] ? create_object.isra.0+0x3a/0xa20 [ 2388.355864] should_failslab+0x5/0x20 [ 2388.356627] kmem_cache_alloc+0x5b/0x360 [ 2388.357450] ? mark_held_locks+0x9e/0xe0 [ 2388.358269] create_object.isra.0+0x3a/0xa20 [ 2388.359147] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2388.360174] kmem_cache_alloc_bulk+0x168/0x320 [ 2388.361115] io_submit_sqes+0x7099/0x86e0 [ 2388.361954] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2388.362951] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2388.363938] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2388.364909] ? io_submit_sqes+0x86e0/0x86e0 [ 2388.365777] ? recalibrate_cpu_khz+0x10/0x10 [ 2388.366649] ? ktime_get+0x158/0x1f0 [ 2388.367400] ? lapic_timer_set_periodic+0x60/0x60 [ 2388.368354] ? clockevents_program_event+0x131/0x360 [ 2388.369375] ? tick_program_event+0xa8/0x140 [ 2388.370248] ? hrtimer_interrupt+0x771/0x9b0 [ 2388.371140] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2388.372197] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2388.373233] do_syscall_64+0x33/0x40 [ 2388.373973] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2388.374988] RIP: 0033:0x7f7740d7eb19 [ 2388.375728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2388.379352] RSP: 002b:00007f773e2f4188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2388.380855] RAX: ffffffffffffffda RBX: 00007f7740e91f60 RCX: 00007f7740d7eb19 [ 2388.382275] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2388.383691] RBP: 00007f773e2f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2388.385111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2388.386519] R13: 00007ffd25bf08cf R14: 00007f773e2f4300 R15: 0000000000022000 13:13:35 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:13:35 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:13:35 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) [ 2388.696401] FAULT_INJECTION: forcing a failure. [ 2388.696401] name failslab, interval 1, probability 0, space 0, times 0 [ 2388.699204] CPU: 1 PID: 12610 Comm: syz-executor.7 Not tainted 5.10.175 #1 [ 2388.700600] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2388.702292] Call Trace: [ 2388.702829] dump_stack+0x107/0x167 [ 2388.703577] should_fail.cold+0x5/0xa [ 2388.704359] ? io_setup_async_msg+0xda/0x2d0 [ 2388.705282] should_failslab+0x5/0x20 [ 2388.706058] __kmalloc+0x72/0x330 [ 2388.706774] io_setup_async_msg+0xda/0x2d0 [ 2388.707632] io_recvmsg+0xb6f/0xca0 [ 2388.708385] ? io_sendmsg+0x790/0x790 [ 2388.709203] ? mark_lock+0x1/0x2df0 [ 2388.709951] ? stack_trace_consume_entry+0x160/0x160 [ 2388.711008] ? __lock_acquire+0xbb1/0x5b00 [ 2388.711875] io_issue_sqe+0x35f1/0x7660 [ 2388.712687] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2388.713747] ? SOFTIRQ_verbose+0x10/0x10 [ 2388.714568] ? lock_chain_count+0x20/0x20 [ 2388.715413] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2388.716473] ? io_connect+0x610/0x610 [ 2388.717268] ? find_held_lock+0x2c/0x110 [ 2388.718102] ? __fget_files+0x26d/0x4c0 [ 2388.718909] ? lock_downgrade+0x6d0/0x6d0 [ 2388.719766] __io_queue_sqe+0x90/0xa60 [ 2388.720562] ? io_timeout_prep+0x8b0/0x8b0 [ 2388.721449] io_submit_sqes+0x4484/0x86e0 [ 2388.722331] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2388.723356] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2388.724345] ? io_submit_sqes+0x86e0/0x86e0 [ 2388.725243] ? recalibrate_cpu_khz+0x10/0x10 [ 2388.726131] ? ktime_get+0x158/0x1f0 [ 2388.726894] ? irqentry_enter+0x26/0x60 [ 2388.727707] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2388.728764] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2388.729863] ? trace_hardirqs_on+0x5b/0x180 [ 2388.730736] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2388.731867] do_syscall_64+0x33/0x40 [ 2388.732622] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2388.733678] RIP: 0033:0x7ff0ec34ab19 [ 2388.734432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2388.738154] RSP: 002b:00007ff0e98c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2388.739694] RAX: ffffffffffffffda RBX: 00007ff0ec45df60 RCX: 00007ff0ec34ab19 [ 2388.741144] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2388.742594] RBP: 00007ff0e98c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2388.744040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2388.745501] R13: 00007ffe29f5ce9f R14: 00007ff0e98c0300 R15: 0000000000022000 13:13:36 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) [ 2388.801124] FAULT_INJECTION: forcing a failure. [ 2388.801124] name failslab, interval 1, probability 0, space 0, times 0 [ 2388.803576] CPU: 1 PID: 12613 Comm: syz-executor.5 Not tainted 5.10.175 #1 [ 2388.804978] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2388.806677] Call Trace: [ 2388.807220] dump_stack+0x107/0x167 [ 2388.807976] should_fail.cold+0x5/0xa [ 2388.808754] ? iovec_from_user+0x36c/0x400 [ 2388.809630] should_failslab+0x5/0x20 [ 2388.810412] __kmalloc+0x72/0x330 [ 2388.811122] ? _copy_from_user+0xfb/0x1b0 [ 2388.811988] iovec_from_user+0x36c/0x400 [ 2388.812827] __import_iovec+0x67/0x590 [ 2388.813641] ? lock_downgrade+0x6d0/0x6d0 [ 2388.814502] ? unwind_next_frame+0x13ef/0x1a90 [ 2388.815439] __io_recvmsg_copy_hdr+0x26d/0x2f0 [ 2388.816375] ? __io_compat_recvmsg_copy_hdr+0x360/0x360 [ 2388.817481] ? __is_insn_slot_addr+0x123/0x290 [ 2388.818413] ? lock_downgrade+0x6d0/0x6d0 [ 2388.819260] io_recvmsg+0xa31/0xca0 [ 2388.820002] ? mark_lock+0xf5/0x2df0 [ 2388.820771] ? io_sendmsg+0x790/0x790 [ 2388.821554] ? __is_insn_slot_addr+0x14c/0x290 [ 2388.822485] ? lock_chain_count+0x20/0x20 [ 2388.823337] ? mark_lock+0xf5/0x2df0 [ 2388.824102] ? register_lock_class+0xbb/0x17b0 [ 2388.825048] ? arch_stack_walk+0x99/0xf0 [ 2388.825885] ? is_dynamic_key+0x1e0/0x1e0 [ 2388.826730] ? mark_lock+0x1/0x2df0 [ 2388.827486] ? __lock_acquire+0x1657/0x5b00 [ 2388.828375] ? __lock_acquire+0xbb1/0x5b00 [ 2388.829259] io_issue_sqe+0x35f1/0x7660 [ 2388.830079] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2388.831134] ? SOFTIRQ_verbose+0x10/0x10 [ 2388.831959] ? lock_chain_count+0x20/0x20 [ 2388.832813] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2388.833898] ? io_connect+0x610/0x610 [ 2388.834697] ? find_held_lock+0x2c/0x110 [ 2388.835538] ? __fget_files+0x26d/0x4c0 [ 2388.836364] ? lock_downgrade+0x6d0/0x6d0 [ 2388.837232] __io_queue_sqe+0x90/0xa60 [ 2388.838028] ? io_timeout_prep+0x8b0/0x8b0 [ 2388.838907] io_submit_sqes+0x4279/0x86e0 [ 2388.839788] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2388.840801] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2388.841795] ? lock_downgrade+0x6d0/0x6d0 [ 2388.842639] ? find_held_lock+0x2c/0x110 [ 2388.843467] ? io_submit_sqes+0x86e0/0x86e0 [ 2388.844361] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2388.845367] ? wait_for_completion_io+0x270/0x270 [ 2388.846365] ? rcu_read_lock_any_held+0x75/0xa0 [ 2388.847303] ? vfs_write+0x354/0xa70 [ 2388.848069] ? fput_many+0x2f/0x1a0 [ 2388.848806] ? ksys_write+0x1a9/0x260 [ 2388.849599] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2388.850677] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2388.851744] do_syscall_64+0x33/0x40 [ 2388.852515] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2388.853571] RIP: 0033:0x7f0434711b19 [ 2388.854329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2388.858078] RSP: 002b:00007f0431c87188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2388.859638] RAX: ffffffffffffffda RBX: 00007f0434824f60 RCX: 00007f0434711b19 [ 2388.861102] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2388.862550] RBP: 00007f0431c871d0 R08: 0000000000000000 R09: 0000000000000000 [ 2388.863996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2388.865466] R13: 00007ffd8b38596f R14: 00007f0431c87300 R15: 0000000000022000 13:13:36 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{0x0}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:13:36 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{0x0}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:13:36 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:13:36 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:13:36 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:13:36 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) [ 2388.963169] FAULT_INJECTION: forcing a failure. [ 2388.963169] name failslab, interval 1, probability 0, space 0, times 0 [ 2388.966182] CPU: 1 PID: 12623 Comm: syz-executor.1 Not tainted 5.10.175 #1 [ 2388.967589] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2388.969296] Call Trace: [ 2388.969842] dump_stack+0x107/0x167 [ 2388.970592] should_fail.cold+0x5/0xa [ 2388.971373] ? create_object.isra.0+0x3a/0xa20 [ 2388.972327] should_failslab+0x5/0x20 [ 2388.973128] kmem_cache_alloc+0x5b/0x360 [ 2388.973972] ? mark_held_locks+0x9e/0xe0 [ 2388.974798] create_object.isra.0+0x3a/0xa20 [ 2388.975698] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2388.976731] kmem_cache_alloc_bulk+0x168/0x320 [ 2388.977670] io_submit_sqes+0x7099/0x86e0 [ 2388.978536] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2388.979549] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2388.980568] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2388.981576] ? lock_downgrade+0x6d0/0x6d0 [ 2388.982417] ? find_held_lock+0x2c/0x110 [ 2388.983250] ? io_submit_sqes+0x86e0/0x86e0 [ 2388.984162] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2388.985157] ? wait_for_completion_io+0x270/0x270 [ 2388.986151] ? rcu_read_lock_any_held+0x75/0xa0 [ 2388.987091] ? vfs_write+0x354/0xa70 [ 2388.987849] ? fput_many+0x2f/0x1a0 [ 2388.988587] ? ksys_write+0x1a9/0x260 [ 2388.989392] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2388.990459] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2388.991513] do_syscall_64+0x33/0x40 [ 2388.992271] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2388.993336] RIP: 0033:0x7f7740d7eb19 [ 2388.994089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2388.997828] RSP: 002b:00007f773e2f4188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2388.999368] RAX: ffffffffffffffda RBX: 00007f7740e91f60 RCX: 00007f7740d7eb19 [ 2389.000812] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2389.002270] RBP: 00007f773e2f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2389.003718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2389.005167] R13: 00007ffd25bf08cf R14: 00007f773e2f4300 R15: 0000000000022000 13:13:36 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:13:36 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) [ 2389.133416] FAULT_INJECTION: forcing a failure. [ 2389.133416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2389.135969] CPU: 0 PID: 12632 Comm: syz-executor.7 Not tainted 5.10.175 #1 [ 2389.137346] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2389.138980] Call Trace: [ 2389.139508] dump_stack+0x107/0x167 [ 2389.140235] should_fail.cold+0x5/0xa [ 2389.141002] _copy_from_user+0x2e/0x1b0 [ 2389.141816] __copy_msghdr_from_user+0x91/0x4b0 [ 2389.142734] ? __ia32_sys_shutdown+0x80/0x80 [ 2389.143608] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2389.144644] ? SOFTIRQ_verbose+0x10/0x10 [ 2389.145455] ? lock_downgrade+0x6d0/0x6d0 [ 2389.146279] ? unwind_next_frame+0x13ef/0x1a90 [ 2389.147213] __io_recvmsg_copy_hdr+0xac/0x2f0 [ 2389.148103] ? __io_compat_recvmsg_copy_hdr+0x360/0x360 [ 2389.149191] ? __is_insn_slot_addr+0x123/0x290 [ 2389.150091] ? lock_downgrade+0x6d0/0x6d0 [ 2389.150930] io_recvmsg+0xa31/0xca0 [ 2389.151650] ? mark_lock+0xf5/0x2df0 [ 2389.152401] ? io_sendmsg+0x790/0x790 [ 2389.153175] ? __is_insn_slot_addr+0x14c/0x290 [ 2389.154076] ? lock_chain_count+0x20/0x20 [ 2389.154899] ? mark_lock+0xf5/0x2df0 [ 2389.155636] ? register_lock_class+0xbb/0x17b0 [ 2389.156535] ? arch_stack_walk+0x99/0xf0 [ 2389.157344] ? lock_chain_count+0x20/0x20 [ 2389.158165] ? is_dynamic_key+0x1e0/0x1e0 [ 2389.158987] ? lock_chain_count+0x20/0x20 [ 2389.159822] ? __lock_acquire+0x1657/0x5b00 [ 2389.160686] ? __lock_acquire+0xbb1/0x5b00 [ 2389.161548] io_issue_sqe+0x35f1/0x7660 [ 2389.162340] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2389.163375] ? SOFTIRQ_verbose+0x10/0x10 [ 2389.164176] ? lock_chain_count+0x20/0x20 [ 2389.164998] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2389.166036] ? io_connect+0x610/0x610 [ 2389.166792] ? find_held_lock+0x2c/0x110 [ 2389.167602] ? __fget_files+0x26d/0x4c0 [ 2389.168410] ? lock_downgrade+0x6d0/0x6d0 [ 2389.169258] __io_queue_sqe+0x90/0xa60 [ 2389.170035] ? io_timeout_prep+0x8b0/0x8b0 [ 2389.170891] io_submit_sqes+0x4484/0x86e0 [ 2389.171748] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2389.172728] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2389.173697] ? lock_downgrade+0x6d0/0x6d0 [ 2389.174510] ? find_held_lock+0x2c/0x110 [ 2389.175346] ? io_submit_sqes+0x86e0/0x86e0 [ 2389.176207] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2389.177190] ? wait_for_completion_io+0x270/0x270 [ 2389.178146] ? rcu_read_lock_any_held+0x75/0xa0 [ 2389.179070] ? vfs_write+0x354/0xa70 [ 2389.179810] ? fput_many+0x2f/0x1a0 [ 2389.180552] ? ksys_write+0x1a9/0x260 [ 2389.181334] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2389.182390] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2389.183417] do_syscall_64+0x33/0x40 [ 2389.184175] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2389.185196] RIP: 0033:0x7ff0ec34ab19 [ 2389.185944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2389.189578] RSP: 002b:00007ff0e98c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2389.191110] RAX: ffffffffffffffda RBX: 00007ff0ec45df60 RCX: 00007ff0ec34ab19 [ 2389.192514] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2389.193925] RBP: 00007ff0e98c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2389.195326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2389.196736] R13: 00007ffe29f5ce9f R14: 00007ff0e98c0300 R15: 0000000000022000 13:13:36 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) [ 2389.346413] FAULT_INJECTION: forcing a failure. [ 2389.346413] name failslab, interval 1, probability 0, space 0, times 0 [ 2389.349071] CPU: 1 PID: 12644 Comm: syz-executor.1 Not tainted 5.10.175 #1 [ 2389.350526] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2389.352280] Call Trace: [ 2389.352855] dump_stack+0x107/0x167 [ 2389.353642] should_fail.cold+0x5/0xa [ 2389.354435] ? create_object.isra.0+0x3a/0xa20 [ 2389.355368] should_failslab+0x5/0x20 [ 2389.356151] kmem_cache_alloc+0x5b/0x360 [ 2389.356979] ? mark_held_locks+0x9e/0xe0 [ 2389.357838] create_object.isra.0+0x3a/0xa20 [ 2389.358738] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2389.359781] kmem_cache_alloc_bulk+0x168/0x320 [ 2389.360734] io_submit_sqes+0x7099/0x86e0 [ 2389.361609] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2389.362634] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2389.363648] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2389.364645] ? lock_downgrade+0x6d0/0x6d0 [ 2389.365506] ? find_held_lock+0x2c/0x110 [ 2389.366356] ? io_submit_sqes+0x86e0/0x86e0 [ 2389.367281] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2389.368296] ? wait_for_completion_io+0x270/0x270 [ 2389.369300] ? rcu_read_lock_any_held+0x75/0xa0 [ 2389.370251] ? vfs_write+0x354/0xa70 [ 2389.371010] ? fput_many+0x2f/0x1a0 [ 2389.371746] ? ksys_write+0x1a9/0x260 [ 2389.372544] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2389.373611] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2389.374674] do_syscall_64+0x33/0x40 [ 2389.375448] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2389.376498] RIP: 0033:0x7f7740d7eb19 [ 2389.377262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2389.381049] RSP: 002b:00007f773e2f4188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2389.382579] RAX: ffffffffffffffda RBX: 00007f7740e91f60 RCX: 00007f7740d7eb19 [ 2389.384084] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2389.385542] RBP: 00007f773e2f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2389.387070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2389.388534] R13: 00007ffd25bf08cf R14: 00007f773e2f4300 R15: 0000000000022000 13:13:51 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{0x0}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r10 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r11, r9, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r8, 0xfffffffffffffffb, 0x7, 0x1, 0x1, 0x1, {0x2}}, 0x7) 13:13:51 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:13:51 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r8 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) syz_io_uring_setup(0x215b, &(0x7f0000000340)={0x0, 0xed02, 0x10, 0x80000000, 0x33f, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 13:13:51 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:13:51 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:13:51 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:13:51 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x8, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 13:13:51 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) [ 2404.212081] FAULT_INJECTION: forcing a failure. [ 2404.212081] name failslab, interval 1, probability 0, space 0, times 0 [ 2404.213366] CPU: 1 PID: 12665 Comm: syz-executor.5 Not tainted 5.10.175 #1 [ 2404.214093] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2404.214966] Call Trace: [ 2404.215249] dump_stack+0x107/0x167 [ 2404.215644] should_fail.cold+0x5/0xa [ 2404.216056] ? create_object.isra.0+0x3a/0xa20 [ 2404.216543] should_failslab+0x5/0x20 [ 2404.216947] kmem_cache_alloc+0x5b/0x360 [ 2404.217396] create_object.isra.0+0x3a/0xa20 [ 2404.217862] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2404.218404] __kmalloc+0x16e/0x330 [ 2404.218788] io_setup_async_msg+0xda/0x2d0 [ 2404.219241] io_recvmsg+0xb6f/0xca0 [ 2404.219633] ? io_sendmsg+0x790/0x790 [ 2404.220049] ? mark_lock+0xf5/0x2df0 [ 2404.220455] ? mark_lock+0x1/0x2df0 [ 2404.220847] ? stack_trace_consume_entry+0x160/0x160 [ 2404.221424] ? mark_lock+0xf5/0x2df0 [ 2404.221826] ? lock_chain_count+0x20/0x20 [ 2404.222267] ? __lock_acquire+0xbb1/0x5b00 [ 2404.222728] io_issue_sqe+0x35f1/0x7660 [ 2404.223155] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2404.223718] ? SOFTIRQ_verbose+0x10/0x10 [ 2404.224152] ? lock_chain_count+0x20/0x20 [ 2404.224597] ? io_connect+0x610/0x610 [ 2404.225004] ? find_held_lock+0x2c/0x110 [ 2404.225448] ? __fget_files+0x26d/0x4c0 [ 2404.225873] ? lock_downgrade+0x6d0/0x6d0 [ 2404.226325] __io_queue_sqe+0x90/0xa60 [ 2404.226741] ? io_timeout_prep+0x8b0/0x8b0 [ 2404.227203] io_submit_sqes+0x4279/0x86e0 [ 2404.227664] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2404.228200] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2404.228735] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2404.229305] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2404.229775] ? trace_hardirqs_on+0x5b/0x180 [ 2404.230239] ? io_submit_sqes+0x86e0/0x86e0 [ 2404.230704] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2404.231186] ? finish_task_switch+0x126/0x5d0 [ 2404.231666] ? finish_task_switch+0xef/0x5d0 [ 2404.232150] ? __switch_to+0x572/0x1000 [ 2404.232579] ? __switch_to_asm+0x3a/0x60 [ 2404.233009] ? __switch_to_asm+0x34/0x60 [ 2404.233461] ? __schedule+0x82c/0x1f00 [ 2404.233882] ? io_schedule_timeout+0x140/0x140 [ 2404.234360] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2404.234855] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2404.235438] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2404.235999] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2404.236558] do_syscall_64+0x33/0x40 [ 2404.236956] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2404.237499] RIP: 0033:0x7f0434711b19 [ 2404.237897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2404.239817] RSP: 002b:00007f0431c87188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2404.240618] RAX: ffffffffffffffda RBX: 00007f0434824f60 RCX: 00007f0434711b19 [ 2404.241378] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2404.242127] RBP: 00007f0431c871d0 R08: 0000000000000000 R09: 0000000000000000 [ 2404.242877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2404.243625] R13: 00007ffd8b38596f R14: 00007f0431c87300 R15: 0000000000022000 [ 2404.277635] FAULT_INJECTION: forcing a failure. [ 2404.277635] name failslab, interval 1, probability 0, space 0, times 0 [ 2404.279014] CPU: 1 PID: 12668 Comm: syz-executor.7 Not tainted 5.10.175 #1 [ 2404.279740] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2404.280610] Call Trace: [ 2404.280895] dump_stack+0x107/0x167 [ 2404.281299] should_fail.cold+0x5/0xa [ 2404.281705] ? __io_queue_sqe+0x691/0xa60 [ 2404.282152] should_failslab+0x5/0x20 [ 2404.282551] kmem_cache_alloc_trace+0x55/0x2c0 [ 2404.283035] __io_queue_sqe+0x691/0xa60 [ 2404.283458] ? io_timeout_prep+0x8b0/0x8b0 [ 2404.283921] io_submit_sqes+0x4484/0x86e0 [ 2404.284388] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2404.284911] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2404.285433] ? io_submit_sqes+0x86e0/0x86e0 [ 2404.285896] ? recalibrate_cpu_khz+0x10/0x10 [ 2404.286365] ? ktime_get+0x158/0x1f0 [ 2404.286763] ? lapic_timer_set_periodic+0x60/0x60 [ 2404.287274] ? clockevents_program_event+0x131/0x360 [ 2404.287814] ? tick_program_event+0xa8/0x140 [ 2404.288279] ? hrtimer_interrupt+0x771/0x9b0 [ 2404.288752] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2404.289312] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2404.289861] do_syscall_64+0x33/0x40 [ 2404.290255] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2404.290796] RIP: 0033:0x7ff0ec34ab19 [ 2404.291190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2404.293115] RSP: 002b:00007ff0e98c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2404.293932] RAX: ffffffffffffffda RBX: 00007ff0ec45df60 RCX: 00007ff0ec34ab19 [ 2404.294448] FAULT_INJECTION: forcing a failure. [ 2404.294448] name failslab, interval 1, probability 0, space 0, times 0 [ 2404.294678] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2404.294684] RBP: 00007ff0e98c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2404.294690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2404.294697] R13: 00007ffe29f5ce9f R14: 00007ff0e98c0300 R15: 0000000000022000 [ 2404.294835] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN NOPTI [ 2404.297119] CPU: 0 PID: 12670 Comm: syz-executor.1 Not tainted 5.10.175 #1 [ 2404.297829] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 2404.299333] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2404.300071] CPU: 1 PID: 12668 Comm: syz-executor.7 Not tainted 5.10.175 #1 [ 2404.301579] Call Trace: [ 2404.302671] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2404.302686] RIP: 0010:__io_queue_sqe+0x69f/0xa60 [ 2404.304188] dump_stack+0x107/0x167 [ 2404.304973] Code: 0f 85 24 03 00 00 48 8b 3d 66 86 da 02 ba 48 00 00 00 be 20 0a 00 00 e8 0f cd 7d ff 48 8d 78 14 49 89 c5 48 89 f8 48 c1 e8 03 <42> 0f b6 14 20 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 2404.306815] should_fail.cold+0x5/0xa [ 2404.307521] RSP: 0018:ffff888048e0fb28 EFLAGS: 00010213 [ 2404.308070] ? create_object.isra.0+0x3a/0xa20 [ 2404.308915] [ 2404.308927] RAX: 0000000000000002 RBX: 1ffff110091c1f6b RCX: 0000000000000000 [ 2404.310000] should_failslab+0x5/0x20 [ 2404.310353] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000014 [ 2404.310365] RBP: ffff888048d54000 R08: 0000000000000000 R09: ffffffff8509e133 [ 2404.317325] kmem_cache_alloc+0x5b/0x360 [ 2404.317720] R10: fffffbfff0a13c26 R11: 0000000000000001 R12: dffffc0000000000 [ 2404.317731] R13: 0000000000000000 R14: ffff888048d54058 R15: ffff888048d54048 [ 2404.318872] ? mark_held_locks+0x9e/0xe0 [ 2404.319334] FS: 00007ff0e98c0700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 2404.319688] create_object.isra.0+0x3a/0xa20 [ 2404.320434] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2404.321255] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2404.321991] CR2: 00007f5d77740000 CR3: 000000001ac20000 CR4: 0000000000350ee0 [ 2404.321999] Call Trace: [ 2404.323538] kmem_cache_alloc_bulk+0x168/0x320 [ 2404.323964] ? io_timeout_prep+0x8b0/0x8b0 [ 2404.325500] io_submit_sqes+0x7099/0x86e0 [ 2404.326269] io_submit_sqes+0x4484/0x86e0 [ 2404.327131] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2404.328002] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2404.328946] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2404.329568] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2404.330667] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2404.331428] ? io_submit_sqes+0x86e0/0x86e0 [ 2404.331984] ? lock_downgrade+0x6d0/0x6d0 [ 2404.332464] ? recalibrate_cpu_khz+0x10/0x10 [ 2404.333372] ? find_held_lock+0x2c/0x110 [ 2404.333803] ? ktime_get+0x158/0x1f0 [ 2404.333816] ? lapic_timer_set_periodic+0x60/0x60 [ 2404.334701] ? io_submit_sqes+0x86e0/0x86e0 [ 2404.335201] ? clockevents_program_event+0x131/0x360 [ 2404.335215] ? tick_program_event+0xa8/0x140 [ 2404.336289] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2404.336817] ? hrtimer_interrupt+0x771/0x9b0 [ 2404.337853] ? wait_for_completion_io+0x270/0x270 [ 2404.338355] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2404.339277] ? rcu_read_lock_any_held+0x75/0xa0 [ 2404.339710] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2404.340651] ? vfs_write+0x354/0xa70 [ 2404.341075] do_syscall_64+0x33/0x40 [ 2404.341883] ? fput_many+0x2f/0x1a0 [ 2404.342387] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2404.343306] ? ksys_write+0x1a9/0x260 [ 2404.343840] RIP: 0033:0x7ff0ec34ab19 [ 2404.344791] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2404.345306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2404.346248] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2404.346745] RSP: 002b:00007ff0e98c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2404.347879] do_syscall_64+0x33/0x40 [ 2404.348359] RAX: ffffffffffffffda RBX: 00007ff0ec45df60 RCX: 00007ff0ec34ab19 [ 2404.348370] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2404.349500] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2404.349877] RBP: 00007ff0e98c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2404.349887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2404.350685] RIP: 0033:0x7f7740d7eb19 [ 2404.351063] R13: 00007ffe29f5ce9f R14: 00007ff0e98c0300 R15: 0000000000022000 [ 2404.351071] Modules linked in: [ 2404.352181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2404.352575] [ 2404.353374] RSP: 002b:00007f773e2f4188 EFLAGS: 00000246 [ 2404.353962] ---[ end trace 751da5385fe5a2b8 ]--- [ 2404.357878] ORIG_RAX: 00000000000001aa [ 2404.357890] RAX: ffffffffffffffda RBX: 00007f7740e91f60 RCX: 00007f7740d7eb19 [ 2404.357902] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2404.358464] RIP: 0010:__io_queue_sqe+0x69f/0xa60 [ 2404.360072] RBP: 00007f773e2f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2404.360082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2404.360097] R13: 00007ffd25bf08cf R14: 00007f773e2f4300 R15: 0000000000022000 [ 2404.360499] Code: 0f 85 24 03 00 00 48 8b 3d 66 86 da 02 ba 48 00 00 00 be 20 0a 00 00 e8 0f cd 7d ff 48 8d 78 14 49 89 c5 48 89 f8 48 c1 e8 03 <42> 0f b6 14 20 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 2404.376715] RSP: 0018:ffff888048e0fb28 EFLAGS: 00010213 [ 2404.377330] RAX: 0000000000000002 RBX: 1ffff110091c1f6b RCX: 0000000000000000 [ 2404.378149] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000014 [ 2404.378938] RBP: ffff888048d54000 R08: 0000000000000000 R09: ffffffff8509e133 [ 2404.379735] R10: fffffbfff0a13c26 R11: 0000000000000001 R12: dffffc0000000000 [ 2404.380525] R13: 0000000000000000 R14: ffff888048d54058 R15: ffff888048d54048 [ 2404.381362] FS: 00007ff0e98c0700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 2404.382272] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2404.382927] CR2: 00007f5d77740000 CR3: 000000001ac20000 CR4: 0000000000350ee0 13:13:51 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) 13:13:51 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7d39, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66a6, &(0x7f0000000140)={0x0, 0x6601, 0x1, 0x0, 0x3a2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) [ 2404.523317] FAULT_INJECTION: forcing a failure. [ 2404.523317] name failslab, interval 1, probability 0, space 0, times 0 [ 2404.524593] CPU: 1 PID: 12685 Comm: syz-executor.5 Tainted: G D 5.10.175 #1 [ 2404.525456] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2404.526323] Call Trace: [ 2404.526604] dump_stack+0x107/0x167 [ 2404.526990] should_fail.cold+0x5/0xa [ 2404.527386] ? __io_queue_sqe+0x691/0xa60 [ 2404.527817] should_failslab+0x5/0x20 [ 2404.528215] kmem_cache_alloc_trace+0x55/0x2c0 [ 2404.528689] __io_queue_sqe+0x691/0xa60 [ 2404.529115] ? io_timeout_prep+0x8b0/0x8b0 [ 2404.529561] io_submit_sqes+0x4279/0x86e0 [ 2404.530008] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2404.530529] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2404.531034] ? lock_downgrade+0x6d0/0x6d0 [ 2404.531468] ? __fsnotify_parent+0x488/0x9d0 [ 2404.531924] ? io_submit_sqes+0x86e0/0x86e0 [ 2404.532386] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2404.532901] ? wait_for_completion_io+0x270/0x270 [ 2404.533423] ? vfs_write+0x354/0xa70 [ 2404.533817] ? fput_many+0x2f/0x1a0 [ 2404.534199] ? ksys_write+0x1a9/0x260 [ 2404.534596] ? __ia32_sys_read+0xb0/0xb0 [ 2404.535019] ? fpregs_assert_state_consistent+0xb9/0xe0 [ 2404.535571] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2404.536111] do_syscall_64+0x33/0x40 [ 2404.536500] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2404.537047] RIP: 0033:0x7f0434711b19 [ 2404.537437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2404.539347] RSP: 002b:00007f0431c87188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2404.540131] RAX: ffffffffffffffda RBX: 00007f0434824f60 RCX: 00007f0434711b19 [ 2404.540872] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2404.541623] RBP: 00007f0431c871d0 R08: 0000000000000000 R09: 0000000000000000 [ 2404.542363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2404.543103] R13: 00007ffd8b38596f R14: 00007f0431c87300 R15: 0000000000022000 [ 2404.543917] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#2] SMP KASAN NOPTI [ 2404.545026] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 2404.545821] CPU: 1 PID: 12685 Comm: syz-executor.5 Tainted: G D 5.10.175 #1 [ 2404.546670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2404.547546] RIP: 0010:__io_queue_sqe+0x69f/0xa60 [ 2404.548041] Code: 0f 85 24 03 00 00 48 8b 3d 66 86 da 02 ba 48 00 00 00 be 20 0a 00 00 e8 0f cd 7d ff 48 8d 78 14 49 89 c5 48 89 f8 48 c1 e8 03 <42> 0f b6 14 20 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 2404.549977] RSP: 0018:ffff88804f23fb28 EFLAGS: 00010213 [ 2404.550534] RAX: 0000000000000002 RBX: 1ffff11009e47f6b RCX: 0000000000000000 [ 2404.551279] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000014 [ 2404.552024] RBP: ffff88804d0b2640 R08: 0000000000000a20 R09: ffffffff8509e133 [ 2404.552770] R10: fffffbfff0a13c26 R11: 0000000000000001 R12: dffffc0000000000 [ 2404.553526] R13: 0000000000000000 R14: ffff88804d0b2698 R15: ffff88804d0b2688 [ 2404.554267] FS: 00007f0431c87700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 2404.555109] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2404.555710] CR2: 00007f0431c86d80 CR3: 00000000496d6000 CR4: 0000000000350ee0 [ 2404.556453] Call Trace: [ 2404.556729] ? io_timeout_prep+0x8b0/0x8b0 [ 2404.557172] io_submit_sqes+0x4279/0x86e0 [ 2404.557628] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2404.558148] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 2404.558645] ? lock_downgrade+0x6d0/0x6d0 [ 2404.559085] ? __fsnotify_parent+0x488/0x9d0 [ 2404.559541] ? io_submit_sqes+0x86e0/0x86e0 [ 2404.559994] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2404.560493] ? wait_for_completion_io+0x270/0x270 [ 2404.561008] ? vfs_write+0x354/0xa70 [ 2404.561402] ? fput_many+0x2f/0x1a0 [ 2404.561782] ? ksys_write+0x1a9/0x260 [ 2404.562177] ? __ia32_sys_read+0xb0/0xb0 [ 2404.562604] ? fpregs_assert_state_consistent+0xb9/0xe0 [ 2404.563153] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2404.563695] do_syscall_64+0x33/0x40 [ 2404.564085] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2404.564624] RIP: 0033:0x7f0434711b19 [ 2404.565014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2404.566915] RSP: 002b:00007f0431c87188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2404.567709] RAX: ffffffffffffffda RBX: 00007f0434824f60 RCX: 00007f0434711b19 [ 2404.568454] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2404.569226] RBP: 00007f0431c871d0 R08: 0000000000000000 R09: 0000000000000000 [ 2404.569989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2404.570733] R13: 00007ffd8b38596f R14: 00007f0431c87300 R15: 0000000000022000 [ 2404.571483] Modules linked in: [ 2404.571841] ---[ end trace 751da5385fe5a2b9 ]--- [ 2404.572346] RIP: 0010:__io_queue_sqe+0x69f/0xa60 [ 2404.572864] Code: 0f 85 24 03 00 00 48 8b 3d 66 86 da 02 ba 48 00 00 00 be 20 0a 00 00 e8 0f cd 7d ff 48 8d 78 14 49 89 c5 48 89 f8 48 c1 e8 03 <42> 0f b6 14 20 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 2404.574818] RSP: 0018:ffff888048e0fb28 EFLAGS: 00010213 [ 2404.575401] RAX: 0000000000000002 RBX: 1ffff110091c1f6b RCX: 0000000000000000 [ 2404.576167] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000014 [ 2404.576944] RBP: ffff888048d54000 R08: 0000000000000000 R09: ffffffff8509e133 [ 2404.577728] R10: fffffbfff0a13c26 R11: 0000000000000001 R12: dffffc0000000000 [ 2404.578496] R13: 0000000000000000 R14: ffff888048d54058 R15: ffff888048d54048 [ 2404.579274] FS: 00007f0431c87700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 2404.580150] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2404.580781] CR2: 00007f0431c86d80 CR3: 00000000496d6000 CR4: 0000000000350ee0 VM DIAGNOSIS: 13:13:51 Registers: info registers vcpu 0 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822d3621 RDI=ffffffff879e4160 RBP=ffffffff879e4120 RSP=ffff8880491ef5b8 R8 =0000000000000000 R9 =ffffffff8567288f R10=0000000000000000 R11=0000000000000001 R12=0000000000000038 R13=0000000000000038 R14=ffffffff879e4120 R15=dffffc0000000000 RIP=ffffffff822d3678 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f773e2f4700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000000010c CR3=000000000eef8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000002 RBX=0000000000000001 RCX=ffffffff81298fa3 RDX=0000000000000001 RSI=ffffffff81298f91 RDI=0000000000000001 RBP=0000000000000000 RSP=ffff888048e0f7e8 R8 =0000000000000000 R9 =ffffffff8567288f R10=0000000000000000 R11=0000000000000001 R12=0000000000000041 R13=0000000000000046 R14=ffff88801f320000 R15=0000000000000000 RIP=ffffffff81408594 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff0e98c0700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5d77740000 CR3=000000001ac20000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffffffffffffffffff0000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000