0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:22 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:37 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:37 executing program 3:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:37 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:37 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:37 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:37 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:37 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:37 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0)
close(0xffffffffffffffff)
getpgrp(0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:37 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:37 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0)
close(0xffffffffffffffff)
getpgrp(0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:37 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:37 executing program 3:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:37 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:38 executing program 6:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r0}, 0x0)
close(r0)
getpgrp(0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:38 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:38 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:53 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:53 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:53 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:53 executing program 6:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r0}, 0x0)
close(r0)
getpgrp(0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:53 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:53 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240), 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:53 executing program 3:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:53 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:53 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:53 executing program 6:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r0}, 0x0)
close(r0)
getpgrp(0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:53 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:53 executing program 3:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, 0x0, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:53 executing program 6:
r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:06:53 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240), 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:07 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:07 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:07 executing program 3:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, 0x0, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:07 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240), 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:07 executing program 6:
r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:07 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:07 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:07 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:07 executing program 6:
r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:07 executing program 3:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, 0x0, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:07 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:07 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:07 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:07 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:07 executing program 3:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:07 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{0x0}], 0x1, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:07 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:20 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:20 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:20 executing program 3:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:20 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:20 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:20 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{0x0}], 0x1, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:20 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:20 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:21 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=<r1=>0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0)
close(r2)
getpgrp(0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:21 executing program 3:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:21 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=<r1=>0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0)
close(r2)
getpgrp(0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:21 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=<r1=>0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0)
close(r2)
getpgrp(0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:21 executing program 3:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:21 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0)
close(r2)
getpgrp(0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:33 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:33 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:33 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:33 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0)
close(r2)
getpgrp(0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:33 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{0x0}], 0x1, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:33 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:33 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:33 executing program 3:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:34 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0)
close(r2)
getpgrp(0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:34 executing program 3:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:34 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:34 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:34 executing program 3:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:34 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:34 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:34 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=<r1=>0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0)
close(r2)
getpgrp(0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:48 executing program 3:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:48 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:48 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:48 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
pidfd_open(0x0, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
vmsplice(r5, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:48 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=<r1=>0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0)
close(r2)
getpgrp(0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:48 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:48 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:48 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)}], 0x1, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:48 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=<r1=>0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0)
close(r2)
getpgrp(0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:48 executing program 3:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:48 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:48 executing program 3:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

07:07:49 executing program 3:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

07:07:49 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:49 executing program 3:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

07:07:49 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:07:49 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:04 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:04 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:04 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:04 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:04 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:04 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)}], 0x1, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:04 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:04 executing program 3:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
vmsplice(r5, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:04 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:04 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:04 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)}], 0x1, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:05 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:05 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)}], 0x1, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:05 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1)

07:08:05 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1184.902076] FAULT_INJECTION: forcing a failure.
[ 1184.902076] name failslab, interval 1, probability 0, space 0, times 1
[ 1184.905048] CPU: 1 PID: 9049 Comm: syz-executor.2 Not tainted 5.10.180 #1
[ 1184.906298] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1184.907868] Call Trace:
[ 1184.908371]  dump_stack+0x107/0x167
[ 1184.909051]  should_fail.cold+0x5/0xa
[ 1184.909800]  should_failslab+0x5/0x20
[ 1184.910558]  kmem_cache_alloc_bulk+0x4b/0x320
[ 1184.911413]  io_submit_sqes+0x6f76/0x85c0
[ 1184.912222]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1184.913161]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1184.914060]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1184.914981]  ? lock_downgrade+0x6d0/0x6d0
[ 1184.915724]  ? find_held_lock+0x2c/0x110
[ 1184.916465]  ? io_submit_sqes+0x85c0/0x85c0
[ 1184.917256]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1184.918135]  ? wait_for_completion_io+0x270/0x270
[ 1184.919018]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1184.919854]  ? vfs_write+0x354/0xa70
[ 1184.920539]  ? fput_many+0x2f/0x1a0
[ 1184.921215]  ? ksys_write+0x1a9/0x260
[ 1184.921910]  ? __ia32_sys_read+0xb0/0xb0
[ 1184.922670]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1184.923617]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1184.924553]  do_syscall_64+0x33/0x40
[ 1184.925230]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1184.926150] RIP: 0033:0x7f7f8f712b19
[ 1184.926837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1184.930101] RSP: 002b:00007f7f8cc88188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1184.931480] RAX: ffffffffffffffda RBX: 00007f7f8f825f60 RCX: 00007f7f8f712b19
[ 1184.932738] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1184.934007] RBP: 00007f7f8cc881d0 R08: 0000000000000000 R09: 0000000000000000
[ 1184.935302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1184.936563] R13: 00007ffc8d44fcdf R14: 00007f7f8cc88300 R15: 0000000000022000
07:08:05 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:17 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:17 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2)

07:08:17 executing program 3:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
vmsplice(r5, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:17 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:17 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:17 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)}], 0x1, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:17 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:17 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1197.522744] FAULT_INJECTION: forcing a failure.
[ 1197.522744] name failslab, interval 1, probability 0, space 0, times 0
[ 1197.524141] CPU: 1 PID: 9075 Comm: syz-executor.2 Not tainted 5.10.180 #1
[ 1197.524906] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1197.525844] Call Trace:
[ 1197.526157]  dump_stack+0x107/0x167
[ 1197.526593]  should_fail.cold+0x5/0xa
[ 1197.527038]  ? create_object.isra.0+0x3a/0xa20
[ 1197.527570]  should_failslab+0x5/0x20
[ 1197.528003]  kmem_cache_alloc+0x5b/0x310
[ 1197.528491]  create_object.isra.0+0x3a/0xa20
[ 1197.529008]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1197.529611]  kmem_cache_alloc_bulk+0x168/0x320
[ 1197.530156]  io_submit_sqes+0x6f76/0x85c0
[ 1197.530653]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1197.531236]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1197.531823]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1197.532401]  ? lock_downgrade+0x6d0/0x6d0
[ 1197.532885]  ? find_held_lock+0x2c/0x110
[ 1197.533366]  ? io_submit_sqes+0x85c0/0x85c0
[ 1197.533881]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1197.534454]  ? wait_for_completion_io+0x270/0x270
[ 1197.535039]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1197.535592]  ? vfs_write+0x354/0xa70
[ 1197.536008]  ? fput_many+0x2f/0x1a0
[ 1197.536430]  ? ksys_write+0x1a9/0x260
[ 1197.536866]  ? __ia32_sys_read+0xb0/0xb0
[ 1197.537339]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1197.537952]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1197.538556]  do_syscall_64+0x33/0x40
[ 1197.538983]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1197.539573] RIP: 0033:0x7f7f8f712b19
[ 1197.540006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1197.542165] RSP: 002b:00007f7f8cc88188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1197.543078] RAX: ffffffffffffffda RBX: 00007f7f8f825f60 RCX: 00007f7f8f712b19
[ 1197.543919] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1197.544749] RBP: 00007f7f8cc881d0 R08: 0000000000000000 R09: 0000000000000000
[ 1197.545594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1197.546433] R13: 00007ffc8d44fcdf R14: 00007f7f8cc88300 R15: 0000000000022000
07:08:17 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:17 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:18 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:18 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:18 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)}], 0x1, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:18 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:18 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3)

[ 1198.300692] FAULT_INJECTION: forcing a failure.
[ 1198.300692] name failslab, interval 1, probability 0, space 0, times 0
[ 1198.302376] CPU: 1 PID: 9098 Comm: syz-executor.2 Not tainted 5.10.180 #1
[ 1198.303135] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1198.304058] Call Trace:
[ 1198.304370]  dump_stack+0x107/0x167
[ 1198.304797]  should_fail.cold+0x5/0xa
[ 1198.305221]  ? create_object.isra.0+0x3a/0xa20
[ 1198.305750]  should_failslab+0x5/0x20
[ 1198.306177]  kmem_cache_alloc+0x5b/0x310
[ 1198.306672]  ? mark_held_locks+0x9e/0xe0
[ 1198.307122]  create_object.isra.0+0x3a/0xa20
[ 1198.307629]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1198.308197]  kmem_cache_alloc_bulk+0x168/0x320
[ 1198.308740]  io_submit_sqes+0x6f76/0x85c0
[ 1198.309208]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1198.309797]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1198.310365]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1198.310948]  ? lock_downgrade+0x6d0/0x6d0
[ 1198.311409]  ? find_held_lock+0x2c/0x110
[ 1198.311883]  ? io_submit_sqes+0x85c0/0x85c0
[ 1198.312373]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1198.312938]  ? wait_for_completion_io+0x270/0x270
[ 1198.313472]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1198.314014]  ? vfs_write+0x354/0xa70
[ 1198.314428]  ? fput_many+0x2f/0x1a0
[ 1198.314860]  ? ksys_write+0x1a9/0x260
[ 1198.315289]  ? __ia32_sys_read+0xb0/0xb0
[ 1198.315781]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1198.316361]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1198.316969]  do_syscall_64+0x33/0x40
[ 1198.317399]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1198.317992] RIP: 0033:0x7f7f8f712b19
[ 1198.318425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1198.320562] RSP: 002b:00007f7f8cc88188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1198.321431] RAX: ffffffffffffffda RBX: 00007f7f8f825f60 RCX: 00007f7f8f712b19
[ 1198.322239] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1198.323060] RBP: 00007f7f8cc881d0 R08: 0000000000000000 R09: 0000000000000000
[ 1198.323869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1198.324676] R13: 00007ffc8d44fcdf R14: 00007f7f8cc88300 R15: 0000000000022000
07:08:18 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:33 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:33 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:33 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:33 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:33 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4)

07:08:33 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:33 executing program 3:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:33 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1213.524956] FAULT_INJECTION: forcing a failure.
[ 1213.524956] name failslab, interval 1, probability 0, space 0, times 0
[ 1213.527837] CPU: 0 PID: 9112 Comm: syz-executor.2 Not tainted 5.10.180 #1
[ 1213.529301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1213.531094] Call Trace:
[ 1213.531692]  dump_stack+0x107/0x167
[ 1213.532504]  should_fail.cold+0x5/0xa
[ 1213.533340]  ? create_object.isra.0+0x3a/0xa20
[ 1213.534342]  should_failslab+0x5/0x20
[ 1213.535189]  kmem_cache_alloc+0x5b/0x310
[ 1213.536032]  ? mark_held_locks+0x9e/0xe0
[ 1213.536888]  create_object.isra.0+0x3a/0xa20
[ 1213.537800]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1213.538877]  kmem_cache_alloc_bulk+0x168/0x320
[ 1213.539830]  io_submit_sqes+0x6f76/0x85c0
[ 1213.540706]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1213.541743]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1213.542771]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1213.543824]  ? lock_downgrade+0x6d0/0x6d0
[ 1213.544729]  ? find_held_lock+0x2c/0x110
[ 1213.545636]  ? io_submit_sqes+0x85c0/0x85c0
[ 1213.546597]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1213.547674]  ? wait_for_completion_io+0x270/0x270
[ 1213.548735]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1213.549757]  ? vfs_write+0x354/0xa70
[ 1213.550591]  ? fput_many+0x2f/0x1a0
[ 1213.551422]  ? ksys_write+0x1a9/0x260
[ 1213.552281]  ? __ia32_sys_read+0xb0/0xb0
[ 1213.553192]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1213.554363]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1213.555503]  do_syscall_64+0x33/0x40
[ 1213.556285]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1213.557337] RIP: 0033:0x7f7f8f712b19
[ 1213.558117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1213.561871] RSP: 002b:00007f7f8cc88188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1213.563529] RAX: ffffffffffffffda RBX: 00007f7f8f825f60 RCX: 00007f7f8f712b19
[ 1213.565089] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1213.566652] RBP: 00007f7f8cc881d0 R08: 0000000000000000 R09: 0000000000000000
[ 1213.568227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1213.569782] R13: 00007ffc8d44fcdf R14: 00007f7f8cc88300 R15: 0000000000022000
07:08:34 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:34 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0xc0085504, 0x20000000) (fail_nth: 1)

07:08:34 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1214.258041] udc-core: couldn't find an available UDC or it's busy
[ 1214.259546] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1214.282102] FAULT_INJECTION: forcing a failure.
[ 1214.282102] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 1214.284544] CPU: 1 PID: 9134 Comm: syz-executor.3 Not tainted 5.10.180 #1
[ 1214.285932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1214.287625] Call Trace:
[ 1214.288167]  dump_stack+0x107/0x167
[ 1214.288908]  should_fail.cold+0x5/0xa
[ 1214.289696]  _copy_from_user+0x2e/0x1b0
[ 1214.290512]  raw_alloc_io_data+0x2d/0x1c0
[ 1214.291364]  raw_ioctl+0x1652/0x1e50
[ 1214.292132]  ? gadget_bind+0x7c0/0x7c0
[ 1214.292923]  ? selinux_file_ioctl+0xb6/0x270
[ 1214.293824]  ? gadget_bind+0x7c0/0x7c0
[ 1214.294616]  __x64_sys_ioctl+0x19a/0x210
[ 1214.295462]  do_syscall_64+0x33/0x40
[ 1214.296224]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1214.297262] RIP: 0033:0x7f63b0edcb19
[ 1214.298019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1214.301809] RSP: 002b:00007f63ae452188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1214.303369] RAX: ffffffffffffffda RBX: 00007f63b0feff60 RCX: 00007f63b0edcb19
[ 1214.304828] RDX: 0000000020000000 RSI: 00000000c0085504 RDI: 0000000000000003
[ 1214.306287] RBP: 00007f63ae4521d0 R08: 0000000000000000 R09: 0000000000000000
[ 1214.307750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1214.309203] R13: 00007ffe158bf2df R14: 00007f63ae452300 R15: 0000000000022000
07:08:34 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1214.412162] perf: interrupt took too long (9787 > 9778), lowering kernel.perf_event_max_sample_rate to 20000
07:08:34 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:34 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5)

[ 1214.562667] FAULT_INJECTION: forcing a failure.
[ 1214.562667] name failslab, interval 1, probability 0, space 0, times 0
[ 1214.565472] CPU: 1 PID: 9144 Comm: syz-executor.2 Not tainted 5.10.180 #1
[ 1214.566856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1214.568496] Call Trace:
[ 1214.569024]  dump_stack+0x107/0x167
[ 1214.569754]  should_fail.cold+0x5/0xa
[ 1214.570528]  ? create_object.isra.0+0x3a/0xa20
[ 1214.571451]  should_failslab+0x5/0x20
[ 1214.572205]  kmem_cache_alloc+0x5b/0x310
[ 1214.573007]  ? mark_held_locks+0x9e/0xe0
[ 1214.573814]  create_object.isra.0+0x3a/0xa20
[ 1214.574684]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1214.575749]  kmem_cache_alloc_bulk+0x168/0x320
[ 1214.576684]  io_submit_sqes+0x6f76/0x85c0
[ 1214.577540]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1214.578547]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1214.579548]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1214.580531]  ? lock_downgrade+0x6d0/0x6d0
[ 1214.581348]  ? find_held_lock+0x2c/0x110
[ 1214.582175]  ? io_submit_sqes+0x85c0/0x85c0
[ 1214.583051]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1214.584008]  ? wait_for_completion_io+0x270/0x270
[ 1214.584964]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1214.585884]  ? vfs_write+0x354/0xa70
[ 1214.586636]  ? fput_many+0x2f/0x1a0
[ 1214.587377]  ? ksys_write+0x1a9/0x260
[ 1214.588136]  ? __ia32_sys_read+0xb0/0xb0
[ 1214.588947]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1214.589995]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1214.591034]  do_syscall_64+0x33/0x40
[ 1214.591771]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1214.592783] RIP: 0033:0x7f7f8f712b19
[ 1214.593516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1214.597270] RSP: 002b:00007f7f8cc88188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1214.598851] RAX: ffffffffffffffda RBX: 00007f7f8f825f60 RCX: 00007f7f8f712b19
[ 1214.600332] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1214.601829] RBP: 00007f7f8cc881d0 R08: 0000000000000000 R09: 0000000000000000
[ 1214.603367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1214.604823] R13: 00007ffc8d44fcdf R14: 00007f7f8cc88300 R15: 0000000000022000
07:08:34 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:35 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0xc0085504, 0x20000000) (fail_nth: 2)

07:08:35 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1215.071620] udc-core: couldn't find an available UDC or it's busy
[ 1215.072926] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1215.092729] FAULT_INJECTION: forcing a failure.
[ 1215.092729] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1215.095254] CPU: 1 PID: 9157 Comm: syz-executor.3 Not tainted 5.10.180 #1
[ 1215.096511] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1215.098034] Call Trace:
[ 1215.098527]  dump_stack+0x107/0x167
[ 1215.099201]  should_fail.cold+0x5/0xa
[ 1215.099922]  _copy_to_user+0x2e/0x180
[ 1215.100642]  simple_read_from_buffer+0xcc/0x160
[ 1215.101529]  proc_fail_nth_read+0x198/0x230
[ 1215.102347]  ? proc_sessionid_read+0x230/0x230
[ 1215.103236]  ? security_file_permission+0x24e/0x570
[ 1215.104168]  ? perf_trace_initcall_start+0x101/0x380
[ 1215.105111]  ? proc_sessionid_read+0x230/0x230
[ 1215.105952]  vfs_read+0x228/0x580
[ 1215.106598]  ksys_read+0x12d/0x260
[ 1215.107265]  ? vfs_write+0xa70/0xa70
[ 1215.107950]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1215.108903]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1215.109852]  do_syscall_64+0x33/0x40
[ 1215.110530]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1215.111500] RIP: 0033:0x7f63b0e8f69c
[ 1215.112181] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1215.115548] RSP: 002b:00007f63ae452170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1215.116940] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f63b0e8f69c
[ 1215.118259] RDX: 000000000000000f RSI: 00007f63ae4521e0 RDI: 0000000000000005
[ 1215.119593] RBP: 00007f63ae4521d0 R08: 0000000000000000 R09: 0000000000000000
[ 1215.120910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1215.122235] R13: 00007ffe158bf2df R14: 00007f63ae452300 R15: 0000000000022000
07:08:35 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:49 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:49 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6)

07:08:49 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:49 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:49 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0xc0085504, 0x20000000)

07:08:49 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
pidfd_open(0x0, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:49 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:49 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1229.048057] FAULT_INJECTION: forcing a failure.
[ 1229.048057] name failslab, interval 1, probability 0, space 0, times 0
[ 1229.049765] CPU: 1 PID: 9174 Comm: syz-executor.2 Not tainted 5.10.180 #1
[ 1229.050669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1229.051761] Call Trace:
[ 1229.052104]  dump_stack+0x107/0x167
[ 1229.052587]  should_fail.cold+0x5/0xa
[ 1229.053081]  ? create_object.isra.0+0x3a/0xa20
[ 1229.053673]  should_failslab+0x5/0x20
[ 1229.054158]  kmem_cache_alloc+0x5b/0x310
[ 1229.054690]  ? mark_held_locks+0x9e/0xe0
[ 1229.055227]  create_object.isra.0+0x3a/0xa20
[ 1229.055795]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1229.056450]  kmem_cache_alloc_bulk+0x168/0x320
[ 1229.057033]  io_submit_sqes+0x6f76/0x85c0
[ 1229.057490]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1229.058028]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1229.058584]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1229.059136]  ? lock_downgrade+0x6d0/0x6d0
[ 1229.059579]  ? find_held_lock+0x2c/0x110
[ 1229.060029]  ? io_submit_sqes+0x85c0/0x85c0
[ 1229.060506]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1229.061022]  ? wait_for_completion_io+0x270/0x270
[ 1229.061511]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1229.062020]  ? vfs_write+0x354/0xa70
[ 1229.062436]  ? fput_many+0x2f/0x1a0
[ 1229.062843]  ? ksys_write+0x1a9/0x260
[ 1229.063262]  ? __ia32_sys_read+0xb0/0xb0
[ 1229.063676]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1229.064241]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1229.064815]  do_syscall_64+0x33/0x40
[ 1229.065221]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1229.065771] RIP: 0033:0x7f7f8f712b19
[ 1229.066178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1229.068224] RSP: 002b:00007f7f8cc88188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1229.069080] RAX: ffffffffffffffda RBX: 00007f7f8f825f60 RCX: 00007f7f8f712b19
[ 1229.069873] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1229.070594] RBP: 00007f7f8cc881d0 R08: 0000000000000000 R09: 0000000000000000
[ 1229.071409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1229.072121] R13: 00007ffc8d44fcdf R14: 00007f7f8cc88300 R15: 0000000000022000
[ 1229.077535] udc-core: couldn't find an available UDC or it's busy
[ 1229.078271] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:08:49 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:49 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:49 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:08:49 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:04 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7)

07:09:04 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:04 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:04 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
pidfd_open(0x0, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:04 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x2, 0x20000000)

07:09:04 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:04 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:04 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1243.819407] udc-core: couldn't find an available UDC or it's busy
[ 1243.820921] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1243.838812] FAULT_INJECTION: forcing a failure.
[ 1243.838812] name failslab, interval 1, probability 0, space 0, times 0
[ 1243.841660] CPU: 1 PID: 9209 Comm: syz-executor.2 Not tainted 5.10.180 #1
[ 1243.843132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1243.844976] Call Trace:
[ 1243.845583]  dump_stack+0x107/0x167
[ 1243.846352]  should_fail.cold+0x5/0xa
[ 1243.847247]  ? create_object.isra.0+0x3a/0xa20
[ 1243.848301]  should_failslab+0x5/0x20
[ 1243.849168]  kmem_cache_alloc+0x5b/0x310
[ 1243.850045]  ? mark_held_locks+0x9e/0xe0
[ 1243.850959]  create_object.isra.0+0x3a/0xa20
[ 1243.851984]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1243.853147]  kmem_cache_alloc_bulk+0x168/0x320
[ 1243.854131]  io_submit_sqes+0x6f76/0x85c0
[ 1243.855064]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1243.856222]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1243.857369]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1243.858484]  ? lock_downgrade+0x6d0/0x6d0
[ 1243.859365]  ? find_held_lock+0x2c/0x110
[ 1243.860305]  ? io_submit_sqes+0x85c0/0x85c0
[ 1243.861305]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1243.862422]  ? wait_for_completion_io+0x270/0x270
[ 1243.863456]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1243.864510]  ? vfs_write+0x354/0xa70
[ 1243.865371]  ? fput_many+0x2f/0x1a0
[ 1243.866149]  ? ksys_write+0x1a9/0x260
[ 1243.867012]  ? __ia32_sys_read+0xb0/0xb0
[ 1243.867980]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1243.869194]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1243.870297]  do_syscall_64+0x33/0x40
[ 1243.871156]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1243.872348] RIP: 0033:0x7f7f8f712b19
[ 1243.873214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1243.877397] RSP: 002b:00007f7f8cc88188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1243.879044] RAX: ffffffffffffffda RBX: 00007f7f8f825f60 RCX: 00007f7f8f712b19
[ 1243.880690] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1243.882328] RBP: 00007f7f8cc881d0 R08: 0000000000000000 R09: 0000000000000000
[ 1243.883984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1243.885618] R13: 00007ffc8d44fcdf R14: 00007f7f8cc88300 R15: 0000000000022000
07:09:04 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:04 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:04 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:04 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:04 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:04 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:04 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:04 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x4b47, 0x20000000)

[ 1244.645674] udc-core: couldn't find an available UDC or it's busy
[ 1244.647196] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:09:05 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8)

07:09:05 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1244.739725] FAULT_INJECTION: forcing a failure.
[ 1244.739725] name failslab, interval 1, probability 0, space 0, times 0
[ 1244.742374] CPU: 0 PID: 9240 Comm: syz-executor.2 Not tainted 5.10.180 #1
[ 1244.743766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1244.745449] Call Trace:
[ 1244.745981]  dump_stack+0x107/0x167
[ 1244.746714]  should_fail.cold+0x5/0xa
[ 1244.747473]  ? create_object.isra.0+0x3a/0xa20
[ 1244.748374]  should_failslab+0x5/0x20
[ 1244.749134]  kmem_cache_alloc+0x5b/0x310
[ 1244.749940]  ? mark_held_locks+0x9e/0xe0
[ 1244.750745]  create_object.isra.0+0x3a/0xa20
[ 1244.751626]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1244.752650]  kmem_cache_alloc_bulk+0x168/0x320
[ 1244.753554]  io_submit_sqes+0x6f76/0x85c0
[ 1244.754387]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1244.755385]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1244.756360]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1244.757356]  ? lock_downgrade+0x6d0/0x6d0
[ 1244.758219]  ? find_held_lock+0x2c/0x110
[ 1244.759077]  ? io_submit_sqes+0x85c0/0x85c0
[ 1244.759969]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1244.760954]  ? wait_for_completion_io+0x270/0x270
[ 1244.761958]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1244.762904]  ? vfs_write+0x354/0xa70
[ 1244.763682]  ? fput_many+0x2f/0x1a0
[ 1244.764447]  ? ksys_write+0x1a9/0x260
[ 1244.765260]  ? __ia32_sys_read+0xb0/0xb0
[ 1244.766106]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1244.767228]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1244.768293]  do_syscall_64+0x33/0x40
[ 1244.769046]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1244.770078] RIP: 0033:0x7f7f8f712b19
[ 1244.770847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1244.774635] RSP: 002b:00007f7f8cc88188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1244.776229] RAX: ffffffffffffffda RBX: 00007f7f8f825f60 RCX: 00007f7f8f712b19
[ 1244.777713] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1244.779175] RBP: 00007f7f8cc881d0 R08: 0000000000000000 R09: 0000000000000000
[ 1244.780662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1244.782136] R13: 00007ffc8d44fcdf R14: 00007f7f8cc88300 R15: 0000000000022000
07:09:05 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9)

07:09:05 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:05 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:05 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
pidfd_open(0x0, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:05 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:05 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:05 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, 0x0, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1245.272064] FAULT_INJECTION: forcing a failure.
[ 1245.272064] name failslab, interval 1, probability 0, space 0, times 0
[ 1245.274713] CPU: 1 PID: 9257 Comm: syz-executor.2 Not tainted 5.10.180 #1
[ 1245.276140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1245.277826] Call Trace:
[ 1245.278391]  dump_stack+0x107/0x167
[ 1245.279154]  should_fail.cold+0x5/0xa
[ 1245.279954]  ? create_object.isra.0+0x3a/0xa20
[ 1245.280906]  should_failslab+0x5/0x20
[ 1245.281702]  kmem_cache_alloc+0x5b/0x310
[ 1245.282545]  ? mark_held_locks+0x9e/0xe0
[ 1245.283398]  create_object.isra.0+0x3a/0xa20
[ 1245.284312]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1245.285362]  kmem_cache_alloc_bulk+0x168/0x320
[ 1245.286309]  io_submit_sqes+0x6f76/0x85c0
[ 1245.287163]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1245.288198]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1245.289218]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1245.290210]  ? lock_downgrade+0x6d0/0x6d0
[ 1245.291053]  ? find_held_lock+0x2c/0x110
[ 1245.291906]  ? io_submit_sqes+0x85c0/0x85c0
[ 1245.292801]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1245.293791]  ? wait_for_completion_io+0x270/0x270
[ 1245.294777]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1245.295728]  ? vfs_write+0x354/0xa70
[ 1245.296504]  ? fput_many+0x2f/0x1a0
[ 1245.297251]  ? ksys_write+0x1a9/0x260
[ 1245.298030]  ? __ia32_sys_read+0xb0/0xb0
[ 1245.298873]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1245.299960]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1245.301013]  do_syscall_64+0x33/0x40
[ 1245.301781]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1245.302815] RIP: 0033:0x7f7f8f712b19
[ 1245.303586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1245.307274] RSP: 002b:00007f7f8cc88188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1245.308815] RAX: ffffffffffffffda RBX: 00007f7f8f825f60 RCX: 00007f7f8f712b19
[ 1245.310250] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1245.311694] RBP: 00007f7f8cc881d0 R08: 0000000000000000 R09: 0000000000000000
[ 1245.313135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1245.314567] R13: 00007ffc8d44fcdf R14: 00007f7f8cc88300 R15: 0000000000022000
[ 1258.211479] udc-core: couldn't find an available UDC or it's busy
[ 1258.212893] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:09:18 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:18 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x4b49, 0x20000000)

07:09:18 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:18 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, 0x0, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:18 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:18 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:18 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:18 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10)

[ 1258.220500] FAULT_INJECTION: forcing a failure.
[ 1258.220500] name failslab, interval 1, probability 0, space 0, times 0
[ 1258.223141] CPU: 1 PID: 9265 Comm: syz-executor.2 Not tainted 5.10.180 #1
[ 1258.224564] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1258.226261] Call Trace:
[ 1258.226825]  dump_stack+0x107/0x167
[ 1258.227600]  should_fail.cold+0x5/0xa
[ 1258.228411]  ? io_setup_async_rw+0x180/0x580
[ 1258.229335]  should_failslab+0x5/0x20
[ 1258.230130]  __kmalloc+0x72/0x390
[ 1258.230867]  io_setup_async_rw+0x180/0x580
[ 1258.231763]  io_read+0xe98/0x11e0
[ 1258.232505]  ? kiocb_done+0xc90/0xc90
[ 1258.233334]  ? stack_trace_consume_entry+0x160/0x160
[ 1258.234399]  ? lock_acquire+0x197/0x470
[ 1258.235234]  ? __lock_acquire+0xbb1/0x5b00
[ 1258.236147]  io_issue_sqe+0x2e12/0x7660
[ 1258.236952]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1258.237996]  ? SOFTIRQ_verbose+0x10/0x10
[ 1258.238808]  ? lock_chain_count+0x20/0x20
[ 1258.239650]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1258.240691]  ? io_connect+0x610/0x610
[ 1258.241456]  ? lock_acquire+0x197/0x470
[ 1258.242247]  ? find_held_lock+0x2c/0x110
[ 1258.243071]  ? __fget_files+0x26d/0x4c0
[ 1258.243872]  ? lock_downgrade+0x6d0/0x6d0
[ 1258.244701]  __io_queue_sqe+0x90/0x9d0
[ 1258.245488]  ? io_issue_sqe+0x7660/0x7660
[ 1258.246306]  ? io_prep_rw+0x7f5/0x1050
[ 1258.247076]  io_submit_sqes+0x4461/0x85c0
[ 1258.247947]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1258.248941]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1258.249889]  ? lock_downgrade+0x6d0/0x6d0
[ 1258.250714]  ? find_held_lock+0x2c/0x110
[ 1258.251519]  ? io_submit_sqes+0x85c0/0x85c0
[ 1258.252385]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1258.253332]  ? wait_for_completion_io+0x270/0x270
[ 1258.254272]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1258.255197]  ? vfs_write+0x354/0xa70
[ 1258.255948]  ? fput_many+0x2f/0x1a0
[ 1258.256673]  ? ksys_write+0x1a9/0x260
[ 1258.257423]  ? __ia32_sys_read+0xb0/0xb0
[ 1258.258238]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1258.259279]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1258.260304]  do_syscall_64+0x33/0x40
[ 1258.261053]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1258.262075] RIP: 0033:0x7f7f8f712b19
[ 1258.262822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1258.266517] RSP: 002b:00007f7f8cc88188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1258.268049] RAX: ffffffffffffffda RBX: 00007f7f8f825f60 RCX: 00007f7f8f712b19
[ 1258.269476] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1258.270905] RBP: 00007f7f8cc881d0 R08: 0000000000000000 R09: 0000000000000000
[ 1258.272337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1258.273761] R13: 00007ffc8d44fcdf R14: 00007f7f8cc88300 R15: 0000000000022000
07:09:18 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, 0x0, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:18 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:19 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:19 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x541b, 0x20000000)

07:09:19 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1258.982646] udc-core: couldn't find an available UDC or it's busy
[ 1258.984424] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:09:19 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11)

[ 1259.217056] FAULT_INJECTION: forcing a failure.
[ 1259.217056] name failslab, interval 1, probability 0, space 0, times 0
[ 1259.219439] CPU: 1 PID: 9298 Comm: syz-executor.2 Not tainted 5.10.180 #1
[ 1259.220687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1259.222179] Call Trace:
[ 1259.222665]  dump_stack+0x107/0x167
[ 1259.223329]  should_fail.cold+0x5/0xa
[ 1259.224045]  ? create_object.isra.0+0x3a/0xa20
[ 1259.224866]  should_failslab+0x5/0x20
[ 1259.225558]  kmem_cache_alloc+0x5b/0x310
[ 1259.226289]  create_object.isra.0+0x3a/0xa20
[ 1259.227083]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1259.228012]  __kmalloc+0x16e/0x390
[ 1259.228659]  io_setup_async_rw+0x180/0x580
[ 1259.229420]  io_read+0xe98/0x11e0
[ 1259.230050]  ? kiocb_done+0xc90/0xc90
[ 1259.230748]  ? stack_trace_consume_entry+0x160/0x160
[ 1259.231682]  ? lock_acquire+0x197/0x470
[ 1259.232394]  ? __lock_acquire+0xbb1/0x5b00
07:09:19 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1259.233156]  io_issue_sqe+0x2e12/0x7660
[ 1259.234105]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1259.235032]  ? SOFTIRQ_verbose+0x10/0x10
[ 1259.235768]  ? lock_chain_count+0x20/0x20
[ 1259.236508]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1259.237436]  ? io_connect+0x610/0x610
[ 1259.238118]  ? lock_acquire+0x197/0x470
[ 1259.238838]  ? find_held_lock+0x2c/0x110
[ 1259.239573]  ? __fget_files+0x26d/0x4c0
[ 1259.240280]  ? lock_downgrade+0x6d0/0x6d0
[ 1259.241029]  __io_queue_sqe+0x90/0x9d0
[ 1259.241731]  ? io_issue_sqe+0x7660/0x7660
[ 1259.242476]  ? io_prep_rw+0x7f5/0x1050
[ 1259.243178]  io_submit_sqes+0x4461/0x85c0
[ 1259.243964]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1259.244857]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1259.245725]  ? lock_downgrade+0x6d0/0x6d0
[ 1259.246464]  ? find_held_lock+0x2c/0x110
[ 1259.247202]  ? io_submit_sqes+0x85c0/0x85c0
[ 1259.247998]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1259.248870]  ? wait_for_completion_io+0x270/0x270
[ 1259.249741]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1259.250564]  ? vfs_write+0x354/0xa70
[ 1259.251248]  ? fput_many+0x2f/0x1a0
[ 1259.251904]  ? ksys_write+0x1a9/0x260
[ 1259.252580]  ? __ia32_sys_read+0xb0/0xb0
[ 1259.253300]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1259.254229]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1259.255143]  do_syscall_64+0x33/0x40
[ 1259.255822]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1259.256736] RIP: 0033:0x7f7f8f712b19
[ 1259.257397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1259.260662] RSP: 002b:00007f7f8cc88188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1259.262010] RAX: ffffffffffffffda RBX: 00007f7f8f825f60 RCX: 00007f7f8f712b19
[ 1259.263278] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1259.264559] RBP: 00007f7f8cc881d0 R08: 0000000000000000 R09: 0000000000000000
[ 1259.265822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1259.267092] R13: 00007ffc8d44fcdf R14: 00007f7f8cc88300 R15: 0000000000022000
07:09:19 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:34 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:34 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:34 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:34 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:34 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:34 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x5421, 0x20000000)

07:09:34 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12)

07:09:34 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1274.093632] udc-core: couldn't find an available UDC or it's busy
[ 1274.095094] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1274.108623] FAULT_INJECTION: forcing a failure.
[ 1274.108623] name failslab, interval 1, probability 0, space 0, times 0
[ 1274.111451] CPU: 0 PID: 9312 Comm: syz-executor.2 Not tainted 5.10.180 #1
[ 1274.112976] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1274.114811] Call Trace:
[ 1274.115427]  dump_stack+0x107/0x167
[ 1274.116279]  should_fail.cold+0x5/0xa
[ 1274.117146]  ? __io_queue_sqe+0x666/0x9d0
[ 1274.118093]  should_failslab+0x5/0x20
[ 1274.118961]  kmem_cache_alloc_trace+0x55/0x320
[ 1274.120012]  __io_queue_sqe+0x666/0x9d0
[ 1274.120923]  ? io_issue_sqe+0x7660/0x7660
[ 1274.121865]  ? io_prep_rw+0x7f5/0x1050
[ 1274.122755]  io_submit_sqes+0x4461/0x85c0
[ 1274.123772]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1274.124891]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1274.125984]  ? lock_downgrade+0x6d0/0x6d0
[ 1274.126919]  ? find_held_lock+0x2c/0x110
[ 1274.127855]  ? io_submit_sqes+0x85c0/0x85c0
[ 1274.128840]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1274.129926]  ? wait_for_completion_io+0x270/0x270
[ 1274.131011]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1274.132070]  ? vfs_write+0x354/0xa70
[ 1274.132920]  ? fput_many+0x2f/0x1a0
[ 1274.133745]  ? ksys_write+0x1a9/0x260
[ 1274.134607]  ? __ia32_sys_read+0xb0/0xb0
[ 1274.135541]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1274.136750]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1274.137908]  do_syscall_64+0x33/0x40
[ 1274.138759]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1274.139905] RIP: 0033:0x7f7f8f712b19
[ 1274.140744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1274.144787] RSP: 002b:00007f7f8cc88188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1274.146468] RAX: ffffffffffffffda RBX: 00007f7f8f825f60 RCX: 00007f7f8f712b19
[ 1274.148047] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1274.149617] RBP: 00007f7f8cc881d0 R08: 0000000000000000 R09: 0000000000000000
[ 1274.151192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1274.152783] R13: 00007ffc8d44fcdf R14: 00007f7f8cc88300 R15: 0000000000022000
07:09:34 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:34 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:34 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:34 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:35 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:49 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x5450, 0x20000000)

07:09:49 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:49 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:49 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:49 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:49 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:49 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
vmsplice(r5, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:49 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1289.532442] udc-core: couldn't find an available UDC or it's busy
[ 1289.534162] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:09:49 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
vmsplice(r5, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:09:50 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

07:09:50 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:04 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:04 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

07:10:04 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:04 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x5451, 0x20000000)

07:10:04 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
vmsplice(r5, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:04 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:04 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:04 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=<r1=>0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
close(0xffffffffffffffff)
r3 = getpgrp(0x0)
pidfd_open(r3, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1303.990112] udc-core: couldn't find an available UDC or it's busy
[ 1303.991434] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:10:04 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:04 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:04 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

07:10:04 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=<r1=>0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
close(0xffffffffffffffff)
r3 = getpgrp(0x0)
pidfd_open(r3, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:04 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:04 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:04 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:04 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:21 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:21 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:21 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1)

07:10:21 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=<r1=>0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
close(0xffffffffffffffff)
r3 = getpgrp(0x0)
pidfd_open(r3, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:21 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, 0x0, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:21 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x5452, 0x20000000)

07:10:21 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, 0x0, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:21 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x60, 0x0, 0x0, 0x0)

[ 1321.301750] udc-core: couldn't find an available UDC or it's busy
[ 1321.302680] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1321.315802] FAULT_INJECTION: forcing a failure.
[ 1321.315802] name failslab, interval 1, probability 0, space 0, times 0
[ 1321.318573] CPU: 0 PID: 9418 Comm: syz-executor.1 Not tainted 5.10.180 #1
[ 1321.320030] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1321.321705] Call Trace:
[ 1321.322263]  dump_stack+0x107/0x167
[ 1321.323014]  should_fail.cold+0x5/0xa
[ 1321.323811]  should_failslab+0x5/0x20
[ 1321.324616]  kmem_cache_alloc_bulk+0x4b/0x320
[ 1321.325535]  io_submit_sqes+0x6f76/0x85c0
[ 1321.326387]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1321.327404]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1321.328428]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1321.329533]  ? lock_downgrade+0x6d0/0x6d0
[ 1321.330473]  ? find_held_lock+0x2c/0x110
[ 1321.331406]  ? io_submit_sqes+0x85c0/0x85c0
[ 1321.332408]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1321.333509]  ? wait_for_completion_io+0x270/0x270
[ 1321.334610]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1321.335664]  ? vfs_write+0x354/0xa70
[ 1321.336546]  ? fput_many+0x2f/0x1a0
[ 1321.337385]  ? ksys_write+0x1a9/0x260
[ 1321.338257]  ? __ia32_sys_read+0xb0/0xb0
[ 1321.339194]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1321.340399]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1321.341575]  do_syscall_64+0x33/0x40
[ 1321.342431]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1321.343587] RIP: 0033:0x7fa425a51b19
[ 1321.344455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1321.348589] RSP: 002b:00007fa422fc7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1321.350309] RAX: ffffffffffffffda RBX: 00007fa425b64f60 RCX: 00007fa425a51b19
[ 1321.351914] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1321.353526] RBP: 00007fa422fc71d0 R08: 0000000000000000 R09: 0000000000000000
[ 1321.355133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1321.356757] R13: 00007ffc42664c4f R14: 00007fa422fc7300 R15: 0000000000022000
07:10:21 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, 0x0, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:21 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, 0x0, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:21 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:21 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0)
close(0xffffffffffffffff)
r3 = getpgrp(0x0)
pidfd_open(r3, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:21 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:21 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, 0x0, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:21 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, 0x0, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:22 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1335.004782] udc-core: couldn't find an available UDC or it's busy
[ 1335.005557] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:10:35 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0)
close(0xffffffffffffffff)
r3 = getpgrp(0x0)
pidfd_open(r3, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:35 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:35 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:35 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x5460, 0x20000000)

07:10:35 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:35 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:35 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0)

07:10:35 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2)

[ 1335.037891] FAULT_INJECTION: forcing a failure.
[ 1335.037891] name failslab, interval 1, probability 0, space 0, times 0
[ 1335.040879] CPU: 0 PID: 9463 Comm: syz-executor.1 Not tainted 5.10.180 #1
[ 1335.042350] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1335.044007] Call Trace:
[ 1335.044552]  dump_stack+0x107/0x167
[ 1335.045267]  should_fail.cold+0x5/0xa
[ 1335.046029]  ? create_object.isra.0+0x3a/0xa20
[ 1335.046922]  should_failslab+0x5/0x20
[ 1335.047676]  kmem_cache_alloc+0x5b/0x310
[ 1335.048506]  create_object.isra.0+0x3a/0xa20
[ 1335.049375]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1335.050383]  kmem_cache_alloc_bulk+0x168/0x320
[ 1335.051294]  io_submit_sqes+0x6f76/0x85c0
[ 1335.052119]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1335.053110]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1335.054092]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1335.055059]  ? lock_downgrade+0x6d0/0x6d0
[ 1335.055876]  ? find_held_lock+0x2c/0x110
[ 1335.056699]  ? io_submit_sqes+0x85c0/0x85c0
[ 1335.057557]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1335.058506]  ? wait_for_completion_io+0x270/0x270
[ 1335.059467]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1335.060389]  ? vfs_write+0x354/0xa70
[ 1335.061125]  ? fput_many+0x2f/0x1a0
[ 1335.061840]  ? ksys_write+0x1a9/0x260
[ 1335.062621]  ? __ia32_sys_read+0xb0/0xb0
[ 1335.063521]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1335.064689]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1335.065826]  do_syscall_64+0x33/0x40
[ 1335.066649]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1335.067777] RIP: 0033:0x7fa425a51b19
[ 1335.068619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1335.072680] RSP: 002b:00007fa422fc7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1335.074362] RAX: ffffffffffffffda RBX: 00007fa425b64f60 RCX: 00007fa425a51b19
[ 1335.075942] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1335.077544] RBP: 00007fa422fc71d0 R08: 0000000000000000 R09: 0000000000000000
[ 1335.079117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1335.080704] R13: 00007ffc42664c4f R14: 00007fa422fc7300 R15: 0000000000022000
07:10:35 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0)
close(0xffffffffffffffff)
r3 = getpgrp(0x0)
pidfd_open(r3, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:35 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:35 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:35 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:35 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r0}, 0x0)
close(0xffffffffffffffff)
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r3=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:35 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:35 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r0}, 0x0)
close(0xffffffffffffffff)
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r3=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:35 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:35 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, 0x0, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:48 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3)

07:10:48 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r0}, 0x0)
close(0xffffffffffffffff)
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r3=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:48 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:48 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:48 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x5501, 0x20000000)

07:10:48 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, 0x0, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:48 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x6000, 0x0, 0x0, 0x0)

07:10:48 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1348.514312] udc-core: couldn't find an available UDC or it's busy
[ 1348.515057] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1348.522035] FAULT_INJECTION: forcing a failure.
[ 1348.522035] name failslab, interval 1, probability 0, space 0, times 0
[ 1348.523377] CPU: 1 PID: 9499 Comm: syz-executor.1 Not tainted 5.10.180 #1
[ 1348.524152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1348.525094] Call Trace:
[ 1348.525398]  dump_stack+0x107/0x167
[ 1348.525821]  should_fail.cold+0x5/0xa
[ 1348.526258]  ? create_object.isra.0+0x3a/0xa20
[ 1348.526777]  should_failslab+0x5/0x20
[ 1348.527214]  kmem_cache_alloc+0x5b/0x310
[ 1348.527676]  ? mark_held_locks+0x9e/0xe0
[ 1348.528136]  create_object.isra.0+0x3a/0xa20
[ 1348.528650]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1348.529225]  kmem_cache_alloc_bulk+0x168/0x320
[ 1348.529751]  io_submit_sqes+0x6f76/0x85c0
[ 1348.530229]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1348.530791]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1348.531356]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1348.531903]  ? lock_downgrade+0x6d0/0x6d0
[ 1348.532376]  ? find_held_lock+0x2c/0x110
[ 1348.532855]  ? io_submit_sqes+0x85c0/0x85c0
[ 1348.533350]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1348.533899]  ? wait_for_completion_io+0x270/0x270
[ 1348.534450]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1348.534976]  ? vfs_write+0x354/0xa70
[ 1348.535406]  ? fput_many+0x2f/0x1a0
[ 1348.535821]  ? ksys_write+0x1a9/0x260
[ 1348.536261]  ? __ia32_sys_read+0xb0/0xb0
[ 1348.536740]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1348.537338]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1348.537944]  do_syscall_64+0x33/0x40
[ 1348.538390]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1348.538991] RIP: 0033:0x7fa425a51b19
[ 1348.539420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1348.541549] RSP: 002b:00007fa422fc7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1348.542407] RAX: ffffffffffffffda RBX: 00007fa425b64f60 RCX: 00007fa425a51b19
[ 1348.543243] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1348.544054] RBP: 00007fa422fc71d0 R08: 0000000000000000 R09: 0000000000000000
[ 1348.544871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1348.545671] R13: 00007ffc42664c4f R14: 00007fa422fc7300 R15: 0000000000022000
07:10:48 executing program 0:
r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:48 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:49 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:49 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, 0x0, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:49 executing program 0:
r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:49 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:49 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:10:49 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:02 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:02 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:02 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4)

07:11:02 executing program 0:
r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:02 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:02 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x600000, 0x0, 0x0, 0x0)

07:11:02 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x5509, 0x20000000)

07:11:02 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1362.177899] udc-core: couldn't find an available UDC or it's busy
[ 1362.179374] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1362.206906] FAULT_INJECTION: forcing a failure.
[ 1362.206906] name failslab, interval 1, probability 0, space 0, times 0
[ 1362.208588] CPU: 0 PID: 9541 Comm: syz-executor.1 Not tainted 5.10.180 #1
[ 1362.209453] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1362.210508] Call Trace:
[ 1362.210878]  dump_stack+0x107/0x167
[ 1362.211364]  should_fail.cold+0x5/0xa
[ 1362.211879]  ? create_object.isra.0+0x3a/0xa20
[ 1362.212490]  should_failslab+0x5/0x20
[ 1362.213026]  kmem_cache_alloc+0x5b/0x310
[ 1362.213565]  ? mark_held_locks+0x9e/0xe0
[ 1362.214104]  create_object.isra.0+0x3a/0xa20
[ 1362.214686]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1362.215366]  kmem_cache_alloc_bulk+0x168/0x320
[ 1362.215956]  io_submit_sqes+0x6f76/0x85c0
[ 1362.216504]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1362.217183]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1362.217829]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1362.218472]  ? lock_downgrade+0x6d0/0x6d0
[ 1362.219021]  ? find_held_lock+0x2c/0x110
[ 1362.219565]  ? io_submit_sqes+0x85c0/0x85c0
[ 1362.220138]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1362.220800]  ? wait_for_completion_io+0x270/0x270
[ 1362.221438]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1362.222029]  ? vfs_write+0x354/0xa70
[ 1362.222536]  ? fput_many+0x2f/0x1a0
[ 1362.223021]  ? ksys_write+0x1a9/0x260
[ 1362.223534]  ? __ia32_sys_read+0xb0/0xb0
[ 1362.224081]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1362.224780]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1362.225468]  do_syscall_64+0x33/0x40
[ 1362.225972]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1362.226646] RIP: 0033:0x7fa425a51b19
[ 1362.227152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1362.229551] RSP: 002b:00007fa422fc7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1362.230549] RAX: ffffffffffffffda RBX: 00007fa425b64f60 RCX: 00007fa425a51b19
[ 1362.231474] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1362.232402] RBP: 00007fa422fc71d0 R08: 0000000000000000 R09: 0000000000000000
[ 1362.233344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1362.234276] R13: 00007ffc42664c4f R14: 00007fa422fc7300 R15: 0000000000022000
07:11:02 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:02 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:02 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:02 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:02 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:02 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:02 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:02 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:16 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

07:11:16 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:16 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5)

07:11:16 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:16 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

07:11:16 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000)

07:11:16 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0)

07:11:16 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1376.004772] FAULT_INJECTION: forcing a failure.
[ 1376.004772] name failslab, interval 1, probability 0, space 0, times 0
[ 1376.006337] CPU: 1 PID: 9576 Comm: syz-executor.1 Not tainted 5.10.180 #1
[ 1376.007080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1376.007978] Call Trace:
[ 1376.008287]  dump_stack+0x107/0x167
[ 1376.008691]  should_fail.cold+0x5/0xa
[ 1376.009153]  ? create_object.isra.0+0x3a/0xa20
[ 1376.009663]  should_failslab+0x5/0x20
[ 1376.010081]  kmem_cache_alloc+0x5b/0x310
[ 1376.010533]  ? mark_held_locks+0x9e/0xe0
[ 1376.010978]  create_object.isra.0+0x3a/0xa20
[ 1376.011462]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1376.012018]  kmem_cache_alloc_bulk+0x168/0x320
[ 1376.012525]  io_submit_sqes+0x6f76/0x85c0
[ 1376.012994]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1376.013539]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1376.014084]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1376.014612]  ? lock_downgrade+0x6d0/0x6d0
[ 1376.015065]  ? find_held_lock+0x2c/0x110
[ 1376.015515]  ? io_submit_sqes+0x85c0/0x85c0
[ 1376.015992]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1376.016527]  ? wait_for_completion_io+0x270/0x270
[ 1376.017072]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1376.017583]  ? vfs_write+0x354/0xa70
[ 1376.017995]  ? fput_many+0x2f/0x1a0
[ 1376.018397]  ? ksys_write+0x1a9/0x260
[ 1376.018816]  ? __ia32_sys_read+0xb0/0xb0
[ 1376.019268]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1376.019840]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1376.020410]  do_syscall_64+0x33/0x40
[ 1376.020823]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1376.021385] RIP: 0033:0x7fa425a51b19
[ 1376.021794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1376.023760] RSP: 002b:00007fa422fc7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1376.024595] RAX: ffffffffffffffda RBX: 00007fa425b64f60 RCX: 00007fa425a51b19
[ 1376.025387] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1376.026174] RBP: 00007fa422fc71d0 R08: 0000000000000000 R09: 0000000000000000
[ 1376.026946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1376.027719] R13: 00007ffc42664c4f R14: 00007fa422fc7300 R15: 0000000000022000
[ 1376.034073] udc-core: couldn't find an available UDC or it's busy
[ 1376.034795] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:11:16 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

07:11:16 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=<r1=>0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0)
close(0xffffffffffffffff)
r3 = getpgrp(0x0)
pidfd_open(r3, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:16 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

07:11:16 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

07:11:16 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:16 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

07:11:30 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1)

07:11:30 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:30 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6)

07:11:30 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:30 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1)

07:11:30 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x80ffff, 0x0, 0x0, 0x0)

07:11:30 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x40045506, 0x20000000)

07:11:30 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=<r1=>0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0)
close(0xffffffffffffffff)
r3 = getpgrp(0x0)
pidfd_open(r3, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1389.957190] udc-core: couldn't find an available UDC or it's busy
[ 1389.958630] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1389.973020] FAULT_INJECTION: forcing a failure.
[ 1389.973020] name failslab, interval 1, probability 0, space 0, times 0
[ 1389.975649] CPU: 0 PID: 9610 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1389.977062] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1389.978757] Call Trace:
[ 1389.979297]  dump_stack+0x107/0x167
[ 1389.979502] FAULT_INJECTION: forcing a failure.
[ 1389.979502] name failslab, interval 1, probability 0, space 0, times 0
[ 1389.980040]  should_fail.cold+0x5/0xa
[ 1389.980079]  should_failslab+0x5/0x20
[ 1389.983848]  kmem_cache_alloc_bulk+0x4b/0x320
[ 1389.984769]  io_submit_sqes+0x6f76/0x85c0
[ 1389.985633]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1389.986637]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1389.987645]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1389.988623]  ? lock_downgrade+0x6d0/0x6d0
[ 1389.989482]  ? find_held_lock+0x2c/0x110
[ 1389.990314]  ? io_submit_sqes+0x85c0/0x85c0
[ 1389.991200]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1389.992178]  ? wait_for_completion_io+0x270/0x270
[ 1389.993167]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1389.994104]  ? vfs_write+0x354/0xa70
[ 1389.994862]  ? fput_many+0x2f/0x1a0
[ 1389.995592]  ? ksys_write+0x1a9/0x260
[ 1389.996362]  ? __ia32_sys_read+0xb0/0xb0
[ 1389.997210]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1389.998279]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1389.999315]  do_syscall_64+0x33/0x40
[ 1390.000069]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1390.001113] RIP: 0033:0x7fa6f6a9fb19
[ 1390.001865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1390.005558] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1390.007097] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1390.008539] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1390.010001] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1390.011446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1390.012893] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
[ 1390.014409] CPU: 1 PID: 9616 Comm: syz-executor.7 Not tainted 5.10.180 #1
[ 1390.015822] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1390.017528] Call Trace:
[ 1390.018089]  dump_stack+0x107/0x167
[ 1390.018858]  should_fail.cold+0x5/0xa
[ 1390.019091] FAULT_INJECTION: forcing a failure.
[ 1390.019091] name failslab, interval 1, probability 0, space 0, times 0
[ 1390.019661]  should_failslab+0x5/0x20
[ 1390.019693]  kmem_cache_alloc_bulk+0x4b/0x320
[ 1390.019732]  io_submit_sqes+0x6f76/0x85c0
[ 1390.024535]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1390.025621]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1390.026676]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1390.027712]  ? lock_downgrade+0x6d0/0x6d0
[ 1390.028584]  ? find_held_lock+0x2c/0x110
[ 1390.029462]  ? io_submit_sqes+0x85c0/0x85c0
[ 1390.030390]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1390.031417]  ? wait_for_completion_io+0x270/0x270
[ 1390.032450]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1390.033449]  ? vfs_write+0x354/0xa70
[ 1390.034253]  ? fput_many+0x2f/0x1a0
[ 1390.035032]  ? ksys_write+0x1a9/0x260
[ 1390.035844]  ? __ia32_sys_read+0xb0/0xb0
[ 1390.036716]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1390.037841]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1390.038933]  do_syscall_64+0x33/0x40
[ 1390.039735]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1390.040807] RIP: 0033:0x7f1afe2a7b19
[ 1390.041622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1390.045427] RSP: 002b:00007f1afb81d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1390.047029] RAX: ffffffffffffffda RBX: 00007f1afe3baf60 RCX: 00007f1afe2a7b19
[ 1390.048527] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1390.050036] RBP: 00007f1afb81d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1390.051525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1390.053025] R13: 00007ffcbf305d4f R14: 00007f1afb81d300 R15: 0000000000022000
[ 1390.054577] CPU: 0 PID: 9612 Comm: syz-executor.1 Not tainted 5.10.180 #1
[ 1390.056000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1390.057725] Call Trace:
[ 1390.058285]  dump_stack+0x107/0x167
[ 1390.059056]  should_fail.cold+0x5/0xa
[ 1390.059856]  ? create_object.isra.0+0x3a/0xa20
[ 1390.060814]  should_failslab+0x5/0x20
[ 1390.061654]  kmem_cache_alloc+0x5b/0x310
[ 1390.062507]  ? mark_held_locks+0x9e/0xe0
[ 1390.063360]  create_object.isra.0+0x3a/0xa20
[ 1390.064281]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1390.065354]  kmem_cache_alloc_bulk+0x168/0x320
[ 1390.066332]  io_submit_sqes+0x6f76/0x85c0
[ 1390.067216]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1390.068272]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1390.069345]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1390.070370]  ? lock_downgrade+0x6d0/0x6d0
[ 1390.071247]  ? find_held_lock+0x2c/0x110
[ 1390.072115]  ? io_submit_sqes+0x85c0/0x85c0
[ 1390.073047]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1390.074074]  ? wait_for_completion_io+0x270/0x270
[ 1390.075095]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1390.076075]  ? vfs_write+0x354/0xa70
[ 1390.076886]  ? fput_many+0x2f/0x1a0
[ 1390.077681]  ? ksys_write+0x1a9/0x260
[ 1390.078495]  ? __ia32_sys_read+0xb0/0xb0
[ 1390.079366]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1390.080474]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1390.081574]  do_syscall_64+0x33/0x40
[ 1390.082370]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1390.083437] RIP: 0033:0x7fa425a51b19
[ 1390.084230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1390.088030] RSP: 002b:00007fa422fc7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1390.089624] RAX: ffffffffffffffda RBX: 00007fa425b64f60 RCX: 00007fa425a51b19
[ 1390.091108] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1390.092590] RBP: 00007fa422fc71d0 R08: 0000000000000000 R09: 0000000000000000
[ 1390.094080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1390.095563] R13: 00007ffc42664c4f R14: 00007fa422fc7300 R15: 0000000000022000
07:11:30 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:30 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=<r1=>0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0)
close(0xffffffffffffffff)
r3 = getpgrp(0x0)
pidfd_open(r3, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:30 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:30 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

07:11:30 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0)
close(0xffffffffffffffff)
r3 = getpgrp(0x0)
pidfd_open(r3, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:30 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0xc0ffff, 0x0, 0x0, 0x0)

07:11:30 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0)
close(0xffffffffffffffff)
r3 = getpgrp(0x0)
pidfd_open(r3, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:30 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x4004550a, 0x20000000)

[ 1390.678669] udc-core: couldn't find an available UDC or it's busy
[ 1390.680260] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:11:31 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2)

[ 1390.884534] FAULT_INJECTION: forcing a failure.
[ 1390.884534] name failslab, interval 1, probability 0, space 0, times 0
[ 1390.887439] CPU: 1 PID: 9639 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1390.888939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1390.890753] Call Trace:
[ 1390.891353]  dump_stack+0x107/0x167
[ 1390.892173]  should_fail.cold+0x5/0xa
[ 1390.893030]  ? create_object.isra.0+0x3a/0xa20
[ 1390.894071]  should_failslab+0x5/0x20
[ 1390.894917]  kmem_cache_alloc+0x5b/0x310
[ 1390.895830]  create_object.isra.0+0x3a/0xa20
[ 1390.896804]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1390.897935]  kmem_cache_alloc_bulk+0x168/0x320
[ 1390.898945]  io_submit_sqes+0x6f76/0x85c0
[ 1390.899867]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1390.900961]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1390.902053]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1390.903118]  ? lock_downgrade+0x6d0/0x6d0
[ 1390.904021]  ? find_held_lock+0x2c/0x110
[ 1390.904926]  ? io_submit_sqes+0x85c0/0x85c0
[ 1390.905892]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1390.906941]  ? wait_for_completion_io+0x270/0x270
[ 1390.907992]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1390.909003]  ? vfs_write+0x354/0xa70
[ 1390.909834]  ? fput_many+0x2f/0x1a0
[ 1390.910630]  ? ksys_write+0x1a9/0x260
[ 1390.911461]  ? __ia32_sys_read+0xb0/0xb0
[ 1390.912352]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1390.913535]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1390.914655]  do_syscall_64+0x33/0x40
[ 1390.915519]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1390.916615] RIP: 0033:0x7fa6f6a9fb19
[ 1390.917457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1390.921336] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1390.922984] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1390.924503] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1390.926040] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1390.927557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1390.929083] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
07:11:44 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

07:11:44 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x4004550d, 0x20000000)

07:11:44 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1404.408445] FAULT_INJECTION: forcing a failure.
[ 1404.408445] name failslab, interval 1, probability 0, space 0, times 0
[ 1404.409752] CPU: 1 PID: 9651 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1404.410490] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1404.411394] Call Trace:
[ 1404.411693]  dump_stack+0x107/0x167
[ 1404.412099]  should_fail.cold+0x5/0xa
[ 1404.412522]  ? create_object.isra.0+0x3a/0xa20
[ 1404.413027]  should_failslab+0x5/0x20
[ 1404.413488]  kmem_cache_alloc+0x5b/0x310
[ 1404.413944]  ? mark_held_locks+0x9e/0xe0
[ 1404.414402]  create_object.isra.0+0x3a/0xa20
[ 1404.414891]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1404.415455]  kmem_cache_alloc_bulk+0x168/0x320
[ 1404.415961]  io_submit_sqes+0x6f76/0x85c0
[ 1404.416427]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1404.416972]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1404.417526]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1404.418060]  ? lock_downgrade+0x6d0/0x6d0
[ 1404.418515]  ? find_held_lock+0x2c/0x110
[ 1404.418972]  ? io_submit_sqes+0x85c0/0x85c0
[ 1404.419457]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1404.419995]  ? wait_for_completion_io+0x270/0x270
[ 1404.420529]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1404.421237]  ? vfs_write+0x354/0xa70
07:11:44 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3)

07:11:44 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0)
close(0xffffffffffffffff)
r3 = getpgrp(0x0)
pidfd_open(r3, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:44 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:44 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2)

07:11:44 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0)

[ 1404.421731]  ? fput_many+0x2f/0x1a0
[ 1404.422195]  ? ksys_write+0x1a9/0x260
[ 1404.422618]  ? __ia32_sys_read+0xb0/0xb0
[ 1404.423071]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1404.423647]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1404.424215]  do_syscall_64+0x33/0x40
[ 1404.424630]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1404.425190] RIP: 0033:0x7fa6f6a9fb19
[ 1404.425614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1404.427625] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1404.428455] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1404.429239] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1404.429669] udc-core: couldn't find an available UDC or it's busy
[ 1404.430018] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1404.430041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1404.431448] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1404.432156] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
[ 1404.442845] FAULT_INJECTION: forcing a failure.
[ 1404.442845] name failslab, interval 1, probability 0, space 0, times 0
[ 1404.444382] CPU: 1 PID: 9654 Comm: syz-executor.7 Not tainted 5.10.180 #1
[ 1404.445128] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1404.446039] Call Trace:
[ 1404.446351]  dump_stack+0x107/0x167
[ 1404.446757]  should_fail.cold+0x5/0xa
[ 1404.447180]  ? create_object.isra.0+0x3a/0xa20
[ 1404.447693]  should_failslab+0x5/0x20
[ 1404.448116]  kmem_cache_alloc+0x5b/0x310
[ 1404.448585]  create_object.isra.0+0x3a/0xa20
[ 1404.449072]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1404.449651]  kmem_cache_alloc_bulk+0x168/0x320
[ 1404.450166]  io_submit_sqes+0x6f76/0x85c0
[ 1404.450636]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1404.451194]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1404.451744]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1404.452291]  ? lock_downgrade+0x6d0/0x6d0
[ 1404.452745]  ? find_held_lock+0x2c/0x110
[ 1404.453227]  ? io_submit_sqes+0x85c0/0x85c0
[ 1404.453709]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1404.454248]  ? wait_for_completion_io+0x270/0x270
[ 1404.454796]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1404.455314]  ? vfs_write+0x354/0xa70
[ 1404.455729]  ? fput_many+0x2f/0x1a0
[ 1404.456133]  ? ksys_write+0x1a9/0x260
[ 1404.456558]  ? __ia32_sys_read+0xb0/0xb0
[ 1404.457011]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1404.457601]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1404.458174]  do_syscall_64+0x33/0x40
[ 1404.458592]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1404.459147] RIP: 0033:0x7f1afe2a7b19
[ 1404.459559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1404.461572] RSP: 002b:00007f1afb81d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1404.462404] RAX: ffffffffffffffda RBX: 00007f1afe3baf60 RCX: 00007f1afe2a7b19
[ 1404.463191] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1404.463969] RBP: 00007f1afb81d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1404.464740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1404.465540] R13: 00007ffcbf305d4f R14: 00007f1afb81d300 R15: 0000000000022000
07:11:44 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:44 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

07:11:45 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0xffff8000, 0x0, 0x0, 0x0)

07:11:45 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3)

[ 1404.837585] FAULT_INJECTION: forcing a failure.
[ 1404.837585] name failslab, interval 1, probability 0, space 0, times 0
[ 1404.839092] CPU: 1 PID: 9674 Comm: syz-executor.7 Not tainted 5.10.180 #1
[ 1404.839825] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1404.840707] Call Trace:
[ 1404.841011]  dump_stack+0x107/0x167
[ 1404.841409]  should_fail.cold+0x5/0xa
07:11:45 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1404.841895]  ? create_object.isra.0+0x3a/0xa20
[ 1404.842518]  should_failslab+0x5/0x20
[ 1404.842926]  kmem_cache_alloc+0x5b/0x310
[ 1404.843355]  ? mark_held_locks+0x9e/0xe0
[ 1404.843794]  create_object.isra.0+0x3a/0xa20
[ 1404.844271]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1404.844812]  kmem_cache_alloc_bulk+0x168/0x320
[ 1404.845320]  io_submit_sqes+0x6f76/0x85c0
[ 1404.845770]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1404.846331]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1404.846879]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1404.847397]  ? lock_downgrade+0x6d0/0x6d0
[ 1404.847840]  ? find_held_lock+0x2c/0x110
[ 1404.848281]  ? io_submit_sqes+0x85c0/0x85c0
[ 1404.848743]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1404.849268]  ? wait_for_completion_io+0x270/0x270
[ 1404.849783]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1404.850279]  ? vfs_write+0x354/0xa70
[ 1404.850683]  ? fput_many+0x2f/0x1a0
[ 1404.851077]  ? ksys_write+0x1a9/0x260
[ 1404.851478]  ? __ia32_sys_read+0xb0/0xb0
[ 1404.851914]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1404.852475]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1404.853023]  do_syscall_64+0x33/0x40
[ 1404.853437]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1404.853997] RIP: 0033:0x7f1afe2a7b19
[ 1404.854393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1404.856373] RSP: 002b:00007f1afb81d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1404.857199] RAX: ffffffffffffffda RBX: 00007f1afe3baf60 RCX: 00007f1afe2a7b19
[ 1404.857980] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
07:11:45 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1)

[ 1404.858740] RBP: 00007f1afb81d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1404.859624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1404.860390] R13: 00007ffcbf305d4f R14: 00007f1afb81d300 R15: 0000000000022000
[ 1404.906712] FAULT_INJECTION: forcing a failure.
[ 1404.906712] name failslab, interval 1, probability 0, space 0, times 0
[ 1404.908078] CPU: 1 PID: 9676 Comm: syz-executor.4 Not tainted 5.10.180 #1
[ 1404.908814] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1404.909728] Call Trace:
[ 1404.910028]  dump_stack+0x107/0x167
[ 1404.910437]  should_fail.cold+0x5/0xa
[ 1404.910874]  should_failslab+0x5/0x20
[ 1404.911306]  kmem_cache_alloc_bulk+0x4b/0x320
[ 1404.911804]  io_submit_sqes+0x6f76/0x85c0
[ 1404.912283]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1404.912836]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1404.913404]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1404.913949]  ? lock_downgrade+0x6d0/0x6d0
[ 1404.914414]  ? find_held_lock+0x2c/0x110
[ 1404.914871]  ? io_submit_sqes+0x85c0/0x85c0
[ 1404.915365]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1404.915907]  ? wait_for_completion_io+0x270/0x270
[ 1404.916451]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1404.916966]  ? vfs_write+0x354/0xa70
[ 1404.917395]  ? fput_many+0x2f/0x1a0
[ 1404.917810]  ? ksys_write+0x1a9/0x260
[ 1404.918244]  ? __ia32_sys_read+0xb0/0xb0
[ 1404.918704]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1404.919286]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1404.919853]  do_syscall_64+0x33/0x40
[ 1404.920277]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1404.920838] RIP: 0033:0x7f987a861b19
[ 1404.921261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1404.923247] RSP: 002b:00007f9877dd7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1404.924085] RAX: ffffffffffffffda RBX: 00007f987a974f60 RCX: 00007f987a861b19
[ 1404.924873] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1404.925685] RBP: 00007f9877dd71d0 R08: 0000000000000000 R09: 0000000000000000
[ 1404.926475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1404.927254] R13: 00007fffe6ef9cbf R14: 00007f9877dd7300 R15: 0000000000022000
07:11:45 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x4004550e, 0x20000000)

[ 1405.050455] udc-core: couldn't find an available UDC or it's busy
[ 1405.051927] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:11:45 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:45 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4)

[ 1405.335852] FAULT_INJECTION: forcing a failure.
[ 1405.335852] name failslab, interval 1, probability 0, space 0, times 0
[ 1405.337277] CPU: 1 PID: 9686 Comm: syz-executor.7 Not tainted 5.10.180 #1
[ 1405.338020] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1405.338927] Call Trace:
[ 1405.339228]  dump_stack+0x107/0x167
[ 1405.339640]  should_fail.cold+0x5/0xa
[ 1405.340067]  ? create_object.isra.0+0x3a/0xa20
[ 1405.340572]  should_failslab+0x5/0x20
[ 1405.340993]  kmem_cache_alloc+0x5b/0x310
[ 1405.341462]  ? mark_held_locks+0x9e/0xe0
[ 1405.341914]  create_object.isra.0+0x3a/0xa20
[ 1405.342399]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1405.342959]  kmem_cache_alloc_bulk+0x168/0x320
[ 1405.343469]  io_submit_sqes+0x6f76/0x85c0
[ 1405.343935]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1405.344489]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1405.345036]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1405.345584]  ? lock_downgrade+0x6d0/0x6d0
[ 1405.346043]  ? find_held_lock+0x2c/0x110
[ 1405.346491]  ? io_submit_sqes+0x85c0/0x85c0
[ 1405.346978]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1405.347517]  ? wait_for_completion_io+0x270/0x270
[ 1405.348050]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1405.348560]  ? vfs_write+0x354/0xa70
[ 1405.348985]  ? fput_many+0x2f/0x1a0
[ 1405.349405]  ? ksys_write+0x1a9/0x260
[ 1405.349823]  ? __ia32_sys_read+0xb0/0xb0
[ 1405.350277]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1405.350857]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1405.351434]  do_syscall_64+0x33/0x40
[ 1405.351847]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1405.352409] RIP: 0033:0x7f1afe2a7b19
[ 1405.352821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1405.354834] RSP: 002b:00007f1afb81d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1405.355681] RAX: ffffffffffffffda RBX: 00007f1afe3baf60 RCX: 00007f1afe2a7b19
[ 1405.356452] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1405.357267] RBP: 00007f1afb81d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1405.358047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1405.358827] R13: 00007ffcbf305d4f R14: 00007f1afb81d300 R15: 0000000000022000
07:11:45 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=<r1=>0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0)
close(0xffffffffffffffff)
r3 = getpgrp(0x0)
pidfd_open(r3, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:45 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:45 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4)

[ 1405.637966] FAULT_INJECTION: forcing a failure.
[ 1405.637966] name failslab, interval 1, probability 0, space 0, times 0
[ 1405.640634] CPU: 0 PID: 9695 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1405.642104] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1405.643838] Call Trace:
[ 1405.644396]  dump_stack+0x107/0x167
[ 1405.645171]  should_fail.cold+0x5/0xa
[ 1405.645997]  ? create_object.isra.0+0x3a/0xa20
[ 1405.646956]  should_failslab+0x5/0x20
[ 1405.647753]  kmem_cache_alloc+0x5b/0x310
[ 1405.648610]  ? mark_held_locks+0x9e/0xe0
[ 1405.649473]  create_object.isra.0+0x3a/0xa20
[ 1405.650393]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1405.651489]  kmem_cache_alloc_bulk+0x168/0x320
[ 1405.652459]  io_submit_sqes+0x6f76/0x85c0
[ 1405.653375]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1405.654431]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1405.655475]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1405.656513]  ? lock_downgrade+0x6d0/0x6d0
[ 1405.657394]  ? find_held_lock+0x2c/0x110
[ 1405.658270]  ? io_submit_sqes+0x85c0/0x85c0
[ 1405.659192]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1405.660252]  ? wait_for_completion_io+0x270/0x270
[ 1405.661290]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1405.662306]  ? vfs_write+0x354/0xa70
[ 1405.663092]  ? fput_many+0x2f/0x1a0
[ 1405.663886]  ? ksys_write+0x1a9/0x260
[ 1405.664689]  ? __ia32_sys_read+0xb0/0xb0
[ 1405.665590]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1405.666688]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1405.667808]  do_syscall_64+0x33/0x40
[ 1405.668594]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1405.669722] RIP: 0033:0x7fa6f6a9fb19
[ 1405.670510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1405.674502] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1405.676102] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1405.677656] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1405.679204] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1405.680754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1405.682317] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
07:11:58 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:58 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2)

[ 1418.670517] udc-core: couldn't find an available UDC or it's busy
[ 1418.671330] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:11:58 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5)

07:11:58 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=<r1=>0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0)
close(0xffffffffffffffff)
r3 = getpgrp(0x0)
pidfd_open(r3, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:58 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0xffffc000, 0x0, 0x0, 0x0)

07:11:58 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0)

07:11:58 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5)

07:11:58 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x4004550f, 0x20000000)

[ 1418.686040] FAULT_INJECTION: forcing a failure.
[ 1418.686040] name failslab, interval 1, probability 0, space 0, times 0
[ 1418.687409] CPU: 1 PID: 9709 Comm: syz-executor.4 Not tainted 5.10.180 #1
[ 1418.688167] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1418.689073] Call Trace:
[ 1418.689380]  dump_stack+0x107/0x167
[ 1418.689826]  should_fail.cold+0x5/0xa
[ 1418.690266]  ? create_object.isra.0+0x3a/0xa20
[ 1418.690778]  should_failslab+0x5/0x20
[ 1418.690885] FAULT_INJECTION: forcing a failure.
[ 1418.690885] name failslab, interval 1, probability 0, space 0, times 0
[ 1418.691216]  kmem_cache_alloc+0x5b/0x310
[ 1418.691238]  create_object.isra.0+0x3a/0xa20
[ 1418.691257]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1418.691280]  kmem_cache_alloc_bulk+0x168/0x320
[ 1418.691303]  io_submit_sqes+0x6f76/0x85c0
[ 1418.691326]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1418.691362]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1418.691390]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1418.697932]  ? lock_downgrade+0x6d0/0x6d0
[ 1418.698408]  ? find_held_lock+0x2c/0x110
[ 1418.698879]  ? io_submit_sqes+0x85c0/0x85c0
[ 1418.699389]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1418.699959]  ? wait_for_completion_io+0x270/0x270
[ 1418.700527]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1418.701035]  ? vfs_write+0x354/0xa70
[ 1418.701505]  ? fput_many+0x2f/0x1a0
[ 1418.701919]  ? ksys_write+0x1a9/0x260
[ 1418.702344]  ? __ia32_sys_read+0xb0/0xb0
[ 1418.702823]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1418.703437]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1418.704035]  do_syscall_64+0x33/0x40
[ 1418.704451]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1418.705046] RIP: 0033:0x7f987a861b19
[ 1418.705486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1418.707570] RSP: 002b:00007f9877dd7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1418.708424] RAX: ffffffffffffffda RBX: 00007f987a974f60 RCX: 00007f987a861b19
[ 1418.709235] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1418.710060] RBP: 00007f9877dd71d0 R08: 0000000000000000 R09: 0000000000000000
[ 1418.710871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1418.711679] R13: 00007fffe6ef9cbf R14: 00007f9877dd7300 R15: 0000000000022000
[ 1418.712523] CPU: 0 PID: 9706 Comm: syz-executor.7 Not tainted 5.10.180 #1
[ 1418.714040] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1418.715851] Call Trace:
[ 1418.716462]  dump_stack+0x107/0x167
[ 1418.717286]  should_fail.cold+0x5/0xa
[ 1418.717536] FAULT_INJECTION: forcing a failure.
[ 1418.717536] name failslab, interval 1, probability 0, space 0, times 0
[ 1418.718158]  ? create_object.isra.0+0x3a/0xa20
[ 1418.720346]  should_failslab+0x5/0x20
[ 1418.721204]  kmem_cache_alloc+0x5b/0x310
[ 1418.722123]  ? mark_held_locks+0x9e/0xe0
[ 1418.723037]  create_object.isra.0+0x3a/0xa20
[ 1418.724025]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1418.725187]  kmem_cache_alloc_bulk+0x168/0x320
[ 1418.726243]  io_submit_sqes+0x6f76/0x85c0
[ 1418.727186]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1418.728307]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1418.729433]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1418.730522]  ? lock_downgrade+0x6d0/0x6d0
[ 1418.731448]  ? find_held_lock+0x2c/0x110
[ 1418.732368]  ? io_submit_sqes+0x85c0/0x85c0
[ 1418.733349]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1418.734448]  ? wait_for_completion_io+0x270/0x270
[ 1418.735527]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1418.736553]  ? vfs_write+0x354/0xa70
[ 1418.737402]  ? fput_many+0x2f/0x1a0
[ 1418.738219]  ? ksys_write+0x1a9/0x260
[ 1418.739079]  ? __ia32_sys_read+0xb0/0xb0
[ 1418.739989]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1418.741165]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1418.742337]  do_syscall_64+0x33/0x40
[ 1418.743178]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1418.744316] RIP: 0033:0x7f1afe2a7b19
[ 1418.745150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1418.749186] RSP: 002b:00007f1afb81d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1418.750889] RAX: ffffffffffffffda RBX: 00007f1afe3baf60 RCX: 00007f1afe2a7b19
[ 1418.752465] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1418.754056] RBP: 00007f1afb81d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1418.755636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1418.757210] R13: 00007ffcbf305d4f R14: 00007f1afb81d300 R15: 0000000000022000
[ 1418.758819] CPU: 1 PID: 9713 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1418.759575] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1418.760486] Call Trace:
[ 1418.760792]  dump_stack+0x107/0x167
[ 1418.761198]  should_fail.cold+0x5/0xa
[ 1418.761621]  ? create_object.isra.0+0x3a/0xa20
[ 1418.762118]  should_failslab+0x5/0x20
[ 1418.762530]  kmem_cache_alloc+0x5b/0x310
[ 1418.762970]  ? mark_held_locks+0x9e/0xe0
[ 1418.763422]  create_object.isra.0+0x3a/0xa20
[ 1418.763900]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1418.764451]  kmem_cache_alloc_bulk+0x168/0x320
[ 1418.764949]  io_submit_sqes+0x6f76/0x85c0
[ 1418.765418]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1418.765953]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1418.766498]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1418.767020]  ? lock_downgrade+0x6d0/0x6d0
[ 1418.767476]  ? find_held_lock+0x2c/0x110
[ 1418.767926]  ? io_submit_sqes+0x85c0/0x85c0
[ 1418.768395]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1418.768910]  ? wait_for_completion_io+0x270/0x270
[ 1418.769446]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1418.769951]  ? vfs_write+0x354/0xa70
[ 1418.770355]  ? fput_many+0x2f/0x1a0
[ 1418.770752]  ? ksys_write+0x1a9/0x260
[ 1418.771166]  ? __ia32_sys_read+0xb0/0xb0
[ 1418.771616]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1418.772193]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1418.772756]  do_syscall_64+0x33/0x40
[ 1418.773162]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1418.773720] RIP: 0033:0x7fa6f6a9fb19
[ 1418.774123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1418.776067] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1418.776897] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1418.777689] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1418.778460] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1418.779229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1418.780000] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
07:11:59 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=<r1=>0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0)
close(0xffffffffffffffff)
r3 = getpgrp(0x0)
pidfd_open(r3, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:59 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x60, 0x0, 0x0)

07:11:59 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:11:59 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0)

07:11:59 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x6000, 0x0, 0x0)

07:11:59 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x40049409, 0x20000000)

[ 1419.280833] udc-core: couldn't find an available UDC or it's busy
[ 1419.281626] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:11:59 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x600000, 0x0, 0x0)

07:11:59 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0)

07:12:12 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:12:12 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:12:12 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0)

07:12:12 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6)

07:12:12 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:12:12 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x80ffff, 0x0, 0x0)

07:12:12 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x40085503, 0x20000000)

07:12:12 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3)

[ 1432.465925] udc-core: couldn't find an available UDC or it's busy
[ 1432.466802] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1432.479578] FAULT_INJECTION: forcing a failure.
[ 1432.479578] name failslab, interval 1, probability 0, space 0, times 0
[ 1432.480905] CPU: 1 PID: 9766 Comm: syz-executor.4 Not tainted 5.10.180 #1
[ 1432.481714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1432.482670] Call Trace:
[ 1432.482988]  dump_stack+0x107/0x167
[ 1432.483417]  should_fail.cold+0x5/0xa
[ 1432.483864]  ? create_object.isra.0+0x3a/0xa20
[ 1432.484389]  should_failslab+0x5/0x20
[ 1432.484826]  kmem_cache_alloc+0x5b/0x310
[ 1432.485308]  ? mark_held_locks+0x9e/0xe0
[ 1432.485792]  create_object.isra.0+0x3a/0xa20
[ 1432.486308]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1432.486901]  kmem_cache_alloc_bulk+0x168/0x320
[ 1432.487411]  io_submit_sqes+0x6f76/0x85c0
[ 1432.487899]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1432.488477]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1432.489050]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1432.489616]  ? lock_downgrade+0x6d0/0x6d0
[ 1432.490094]  ? find_held_lock+0x2c/0x110
[ 1432.490574]  ? io_submit_sqes+0x85c0/0x85c0
[ 1432.491082]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1432.491474] FAULT_INJECTION: forcing a failure.
[ 1432.491474] name failslab, interval 1, probability 0, space 0, times 0
[ 1432.491645]  ? wait_for_completion_io+0x270/0x270
[ 1432.491666]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1432.491695]  ? vfs_write+0x354/0xa70
[ 1432.495527]  ? fput_many+0x2f/0x1a0
[ 1432.495944]  ? ksys_write+0x1a9/0x260
[ 1432.496384]  ? __ia32_sys_read+0xb0/0xb0
[ 1432.496853]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1432.497449]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1432.498052]  do_syscall_64+0x33/0x40
[ 1432.498484]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1432.499037] RIP: 0033:0x7f987a861b19
[ 1432.499469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1432.501523] RSP: 002b:00007f9877dd7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1432.502413] RAX: ffffffffffffffda RBX: 00007f987a974f60 RCX: 00007f987a861b19
[ 1432.503232] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1432.504052] RBP: 00007f9877dd71d0 R08: 0000000000000000 R09: 0000000000000000
[ 1432.504866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1432.505690] R13: 00007fffe6ef9cbf R14: 00007f9877dd7300 R15: 0000000000022000
[ 1432.506547] CPU: 0 PID: 9767 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1432.508053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1432.509868] Call Trace:
[ 1432.510464]  dump_stack+0x107/0x167
[ 1432.511284]  should_fail.cold+0x5/0xa
[ 1432.512132]  ? create_object.isra.0+0x3a/0xa20
[ 1432.513153]  should_failslab+0x5/0x20
[ 1432.514024]  kmem_cache_alloc+0x5b/0x310
[ 1432.514931]  ? mark_held_locks+0x9e/0xe0
[ 1432.515842]  create_object.isra.0+0x3a/0xa20
[ 1432.516824]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1432.517970]  kmem_cache_alloc_bulk+0x168/0x320
[ 1432.518992]  io_submit_sqes+0x6f76/0x85c0
[ 1432.519920]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1432.521030]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1432.522149]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1432.523224]  ? lock_downgrade+0x6d0/0x6d0
[ 1432.524140]  ? find_held_lock+0x2c/0x110
[ 1432.525051]  ? io_submit_sqes+0x85c0/0x85c0
[ 1432.526032]  ? __mutex_unlock_slowpath+0xe1/0x600
07:12:12 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0xc0ffff, 0x0, 0x0)

[ 1432.527108]  ? wait_for_completion_io+0x270/0x270
[ 1432.528346]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1432.529374]  ? vfs_write+0x354/0xa70
[ 1432.530234]  ? fput_many+0x2f/0x1a0
[ 1432.531046]  ? ksys_write+0x1a9/0x260
[ 1432.531894]  ? __ia32_sys_read+0xb0/0xb0
[ 1432.532807]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1432.533980]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1432.535123]  do_syscall_64+0x33/0x40
[ 1432.535957]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1432.537077] RIP: 0033:0x7fa6f6a9fb19
[ 1432.537914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1432.541900] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1432.543568] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1432.545123] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1432.546692] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1432.548247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1432.549820] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
07:12:13 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:12:13 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:12:27 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:12:27 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:12:27 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4)

07:12:27 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0)

07:12:27 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x40085507, 0x20000000)

07:12:27 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7)

07:12:27 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:12:27 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0)

[ 1446.975953] FAULT_INJECTION: forcing a failure.
[ 1446.975953] name failslab, interval 1, probability 0, space 0, times 0
[ 1446.977503] CPU: 1 PID: 9797 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1446.978257] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1446.979143] Call Trace:
[ 1446.979444]  dump_stack+0x107/0x167
[ 1446.979853]  should_fail.cold+0x5/0xa
[ 1446.980274]  ? create_object.isra.0+0x3a/0xa20
[ 1446.980780]  should_failslab+0x5/0x20
[ 1446.981203]  kmem_cache_alloc+0x5b/0x310
[ 1446.981650]  ? mark_held_locks+0x9e/0xe0
[ 1446.982113]  create_object.isra.0+0x3a/0xa20
[ 1446.982598]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1446.983163]  kmem_cache_alloc_bulk+0x168/0x320
[ 1446.983675]  io_submit_sqes+0x6f76/0x85c0
[ 1446.984144]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1446.984688]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1446.985241]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1446.985781]  ? lock_downgrade+0x6d0/0x6d0
[ 1446.986245]  ? find_held_lock+0x2c/0x110
[ 1446.986698]  ? io_submit_sqes+0x85c0/0x85c0
[ 1446.987180]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1446.987729]  ? wait_for_completion_io+0x270/0x270
[ 1446.988281]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1446.988820]  ? vfs_write+0x354/0xa70
[ 1446.989256]  ? fput_many+0x2f/0x1a0
[ 1446.989668]  ? ksys_write+0x1a9/0x260
[ 1446.990128]  ? __ia32_sys_read+0xb0/0xb0
[ 1446.990601]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1446.991207]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1446.991811]  do_syscall_64+0x33/0x40
[ 1446.992250]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1446.992825] RIP: 0033:0x7fa6f6a9fb19
[ 1446.993254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1446.995337] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1446.996219] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1446.997043] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1446.997857] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1446.998685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1446.999502] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
[ 1447.000764] udc-core: couldn't find an available UDC or it's busy
[ 1447.001586] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1447.012562] FAULT_INJECTION: forcing a failure.
[ 1447.012562] name failslab, interval 1, probability 0, space 0, times 0
[ 1447.013888] CPU: 1 PID: 9798 Comm: syz-executor.4 Not tainted 5.10.180 #1
[ 1447.014664] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1447.015617] Call Trace:
[ 1447.015915]  dump_stack+0x107/0x167
[ 1447.016339]  should_fail.cold+0x5/0xa
[ 1447.016774]  ? create_object.isra.0+0x3a/0xa20
[ 1447.017300]  should_failslab+0x5/0x20
[ 1447.017727]  kmem_cache_alloc+0x5b/0x310
[ 1447.018210]  ? mark_held_locks+0x9e/0xe0
[ 1447.018678]  create_object.isra.0+0x3a/0xa20
[ 1447.019177]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1447.019762]  kmem_cache_alloc_bulk+0x168/0x320
[ 1447.020284]  io_submit_sqes+0x6f76/0x85c0
[ 1447.020761]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1447.021331]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1447.021910]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1447.022485]  ? lock_downgrade+0x6d0/0x6d0
[ 1447.022938]  ? find_held_lock+0x2c/0x110
[ 1447.023422]  ? io_submit_sqes+0x85c0/0x85c0
[ 1447.023903]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1447.024450]  ? wait_for_completion_io+0x270/0x270
[ 1447.024977]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1447.025504]  ? vfs_write+0x354/0xa70
[ 1447.025955]  ? fput_many+0x2f/0x1a0
[ 1447.026377]  ? ksys_write+0x1a9/0x260
[ 1447.026824]  ? __ia32_sys_read+0xb0/0xb0
[ 1447.027292]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1447.027864]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1447.028454]  do_syscall_64+0x33/0x40
[ 1447.028871]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1447.029466] RIP: 0033:0x7f987a861b19
[ 1447.029901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1447.031982] RSP: 002b:00007f9877dd7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1447.032854] RAX: ffffffffffffffda RBX: 00007f987a974f60 RCX: 00007f987a861b19
[ 1447.033668] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1447.034502] RBP: 00007f9877dd71d0 R08: 0000000000000000 R09: 0000000000000000
[ 1447.035322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1447.036142] R13: 00007fffe6ef9cbf R14: 00007f9877dd7300 R15: 0000000000022000
07:12:27 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:12:27 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0xffff8000, 0x0, 0x0)

07:12:27 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:12:27 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8)

[ 1447.415014] FAULT_INJECTION: forcing a failure.
[ 1447.415014] name failslab, interval 1, probability 0, space 0, times 0
[ 1447.416370] CPU: 1 PID: 9817 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1447.417104] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1447.418006] Call Trace:
[ 1447.418309]  dump_stack+0x107/0x167
[ 1447.418713]  should_fail.cold+0x5/0xa
[ 1447.419132]  ? create_object.isra.0+0x3a/0xa20
[ 1447.419640]  should_failslab+0x5/0x20
[ 1447.420074]  kmem_cache_alloc+0x5b/0x310
[ 1447.420536]  ? mark_held_locks+0x9e/0xe0
[ 1447.420998]  create_object.isra.0+0x3a/0xa20
[ 1447.421510]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1447.422085]  kmem_cache_alloc_bulk+0x168/0x320
[ 1447.422604]  io_submit_sqes+0x6f76/0x85c0
[ 1447.423077]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1447.423643]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1447.424199]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1447.424752]  ? lock_downgrade+0x6d0/0x6d0
[ 1447.425218]  ? find_held_lock+0x2c/0x110
[ 1447.425686]  ? io_submit_sqes+0x85c0/0x85c0
[ 1447.426200]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1447.426745]  ? wait_for_completion_io+0x270/0x270
[ 1447.427279]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1447.427802]  ? vfs_write+0x354/0xa70
[ 1447.428228]  ? fput_many+0x2f/0x1a0
[ 1447.428641]  ? ksys_write+0x1a9/0x260
[ 1447.429070]  ? __ia32_sys_read+0xb0/0xb0
[ 1447.429537]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1447.430119]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1447.430697]  do_syscall_64+0x33/0x40
[ 1447.431119]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1447.431697] RIP: 0033:0x7fa6f6a9fb19
[ 1447.432112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1447.434160] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1447.434992] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1447.435789] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1447.436561] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1447.437334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1447.438125] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
[ 1447.667730] udc-core: couldn't find an available UDC or it's busy
[ 1447.668509] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:12:27 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x60, 0x0, 0x0, 0x0)

07:12:27 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x40086602, 0x20000000)

07:12:28 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0xffffc000, 0x0, 0x0)

07:12:28 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9)

[ 1447.855584] FAULT_INJECTION: forcing a failure.
[ 1447.855584] name failslab, interval 1, probability 0, space 0, times 0
[ 1447.856916] CPU: 1 PID: 9832 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1447.857655] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1447.858635] Call Trace:
[ 1447.858933]  dump_stack+0x107/0x167
[ 1447.859335]  should_fail.cold+0x5/0xa
[ 1447.859749]  ? create_object.isra.0+0x3a/0xa20
[ 1447.860236]  should_failslab+0x5/0x20
[ 1447.860654]  kmem_cache_alloc+0x5b/0x310
[ 1447.861090]  ? mark_held_locks+0x9e/0xe0
[ 1447.861525]  create_object.isra.0+0x3a/0xa20
[ 1447.862010]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1447.862553]  kmem_cache_alloc_bulk+0x168/0x320
[ 1447.863042]  io_submit_sqes+0x6f76/0x85c0
[ 1447.863494]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1447.864032]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1447.864562]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1447.865087]  ? lock_downgrade+0x6d0/0x6d0
[ 1447.865549]  ? find_held_lock+0x2c/0x110
[ 1447.866013]  ? io_submit_sqes+0x85c0/0x85c0
[ 1447.866495]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1447.867029]  ? wait_for_completion_io+0x270/0x270
[ 1447.867564]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1447.868071]  ? vfs_write+0x354/0xa70
[ 1447.868490]  ? fput_many+0x2f/0x1a0
[ 1447.868897]  ? ksys_write+0x1a9/0x260
[ 1447.869317]  ? __ia32_sys_read+0xb0/0xb0
[ 1447.869773]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1447.870358]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1447.870929]  do_syscall_64+0x33/0x40
[ 1447.871344]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1447.871909] RIP: 0033:0x7fa6f6a9fb19
[ 1447.872326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1447.874375] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1447.875195] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1447.875981] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1447.876771] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1447.877543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1447.878349] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
07:12:28 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0)

07:12:28 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:12:41 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10)

07:12:41 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0)

07:12:41 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x60000000000000, 0x0, 0x0)

07:12:41 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:12:41 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x40087602, 0x20000000)

07:12:41 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x6000, 0x0, 0x0, 0x0)

07:12:42 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5)

07:12:42 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1461.687880] FAULT_INJECTION: forcing a failure.
[ 1461.687880] name failslab, interval 1, probability 0, space 0, times 0
[ 1461.689438] CPU: 1 PID: 9851 Comm: syz-executor.4 Not tainted 5.10.180 #1
[ 1461.690232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1461.691165] Call Trace:
[ 1461.691479]  dump_stack+0x107/0x167
[ 1461.691904]  should_fail.cold+0x5/0xa
[ 1461.692340]  ? create_object.isra.0+0x3a/0xa20
[ 1461.692862]  should_failslab+0x5/0x20
[ 1461.693298]  kmem_cache_alloc+0x5b/0x310
[ 1461.693766]  ? mark_held_locks+0x9e/0xe0
[ 1461.694245]  create_object.isra.0+0x3a/0xa20
[ 1461.694752]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1461.695335]  kmem_cache_alloc_bulk+0x168/0x320
[ 1461.695862]  io_submit_sqes+0x6f76/0x85c0
[ 1461.696342]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1461.696918]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1461.697455]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1461.698030]  ? lock_downgrade+0x6d0/0x6d0
[ 1461.698506]  ? find_held_lock+0x2c/0x110
[ 1461.698972]  ? io_submit_sqes+0x85c0/0x85c0
[ 1461.699476]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1461.700033]  ? wait_for_completion_io+0x270/0x270
[ 1461.700590]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1461.701118]  ? vfs_write+0x354/0xa70
[ 1461.701558]  ? fput_many+0x2f/0x1a0
[ 1461.701985]  ? ksys_write+0x1a9/0x260
[ 1461.702430]  ? __ia32_sys_read+0xb0/0xb0
[ 1461.702904]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1461.703522]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1461.704128]  do_syscall_64+0x33/0x40
[ 1461.704570]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1461.705160] RIP: 0033:0x7f987a861b19
[ 1461.705598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1461.707694] RSP: 002b:00007f9877dd7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1461.708560] RAX: ffffffffffffffda RBX: 00007f987a974f60 RCX: 00007f987a861b19
[ 1461.709385] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1461.710224] RBP: 00007f9877dd71d0 R08: 0000000000000000 R09: 0000000000000000
[ 1461.711024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1461.711831] R13: 00007fffe6ef9cbf R14: 00007f9877dd7300 R15: 0000000000022000
[ 1461.721584] FAULT_INJECTION: forcing a failure.
[ 1461.721584] name failslab, interval 1, probability 0, space 0, times 0
[ 1461.722940] CPU: 1 PID: 9852 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1461.723687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1461.724559] Call Trace:
[ 1461.724856]  dump_stack+0x107/0x167
[ 1461.725244]  should_fail.cold+0x5/0xa
[ 1461.725682]  ? io_setup_async_rw+0x180/0x580
[ 1461.726176]  should_failslab+0x5/0x20
[ 1461.726600]  __kmalloc+0x72/0x390
[ 1461.726982]  io_setup_async_rw+0x180/0x580
[ 1461.727463]  io_read+0xe98/0x11e0
[ 1461.727852]  ? kiocb_done+0xc90/0xc90
[ 1461.728288]  ? stack_trace_consume_entry+0x160/0x160
[ 1461.728846]  ? lock_acquire+0x197/0x470
[ 1461.729302]  ? lock_acquire+0x197/0x470
[ 1461.729755]  ? __lock_acquire+0xbb1/0x5b00
[ 1461.730242]  io_issue_sqe+0x2e12/0x7660
[ 1461.730683]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1461.731269]  ? SOFTIRQ_verbose+0x10/0x10
[ 1461.731723]  ? lock_chain_count+0x20/0x20
[ 1461.732187]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1461.732766]  ? io_connect+0x610/0x610
[ 1461.733194]  ? lock_acquire+0x197/0x470
[ 1461.733634]  ? find_held_lock+0x2c/0x110
[ 1461.734101]  ? __fget_files+0x26d/0x4c0
[ 1461.734542]  ? lock_downgrade+0x6d0/0x6d0
[ 1461.735000]  __io_queue_sqe+0x90/0x9d0
[ 1461.735450]  ? io_issue_sqe+0x7660/0x7660
[ 1461.735913]  ? io_prep_rw+0x7f5/0x1050
[ 1461.736351]  io_submit_sqes+0x4461/0x85c0
[ 1461.736825]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1461.737202] udc-core: couldn't find an available UDC or it's busy
[ 1461.737381]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1461.737404]  ? lock_downgrade+0x6d0/0x6d0
[ 1461.738849] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1461.739323]  ? find_held_lock+0x2c/0x110
[ 1461.739343]  ? io_submit_sqes+0x85c0/0x85c0
[ 1461.741891]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1461.742456]  ? wait_for_completion_io+0x270/0x270
[ 1461.742986]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1461.743515]  ? vfs_write+0x354/0xa70
[ 1461.743930]  ? fput_many+0x2f/0x1a0
[ 1461.744341]  ? ksys_write+0x1a9/0x260
[ 1461.744775]  ? __ia32_sys_read+0xb0/0xb0
[ 1461.745247]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1461.745841]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1461.746400]  do_syscall_64+0x33/0x40
[ 1461.746820]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1461.747390] RIP: 0033:0x7fa6f6a9fb19
[ 1461.747804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1461.749799] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1461.750660] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1461.751417] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1461.752210] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1461.753017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1461.753787] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
07:12:42 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
getpgrp(0x0)
pidfd_open(0x0, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:12:42 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0)

07:12:42 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:12:42 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0)

07:12:42 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:12:42 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0)

07:12:42 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11)

[ 1462.243906] FAULT_INJECTION: forcing a failure.
[ 1462.243906] name failslab, interval 1, probability 0, space 0, times 0
[ 1462.245433] CPU: 1 PID: 9882 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1462.246186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1462.247082] Call Trace:
[ 1462.247390]  dump_stack+0x107/0x167
[ 1462.247798]  should_fail.cold+0x5/0xa
[ 1462.248237]  ? memcg_alloc_page_obj_cgroups+0x73/0x100
[ 1462.248807]  should_failslab+0x5/0x20
[ 1462.249222]  __kmalloc_node+0x76/0x420
[ 1462.249658]  memcg_alloc_page_obj_cgroups+0x73/0x100
[ 1462.250237]  memcg_slab_post_alloc_hook+0x1f0/0x430
[ 1462.250800]  kmem_cache_alloc_bulk+0x182/0x320
[ 1462.251305]  io_submit_sqes+0x6f76/0x85c0
[ 1462.251768]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1462.252317]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1462.252853]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1462.253390]  ? lock_downgrade+0x6d0/0x6d0
[ 1462.253866]  ? find_held_lock+0x2c/0x110
[ 1462.254349]  ? io_submit_sqes+0x85c0/0x85c0
[ 1462.254850]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1462.255402]  ? wait_for_completion_io+0x270/0x270
[ 1462.255954]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1462.256486]  ? vfs_write+0x354/0xa70
[ 1462.256917]  ? fput_many+0x2f/0x1a0
[ 1462.257333]  ? ksys_write+0x1a9/0x260
[ 1462.257769]  ? __ia32_sys_read+0xb0/0xb0
[ 1462.258254]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1462.258851]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1462.259442]  do_syscall_64+0x33/0x40
[ 1462.259873]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1462.260454] RIP: 0033:0x7fa6f6a9fb19
[ 1462.260881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1462.262955] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1462.263820] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1462.264623] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1462.265421] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1462.266235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1462.267062] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
07:12:42 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:12:42 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x40095505, 0x20000000)

07:12:42 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x600000, 0x0, 0x0, 0x0)

[ 1462.457454] udc-core: couldn't find an available UDC or it's busy
[ 1462.458211] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:12:55 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x4020940d, 0x20000000)

[ 1474.887449] udc-core: couldn't find an available UDC or it's busy
[ 1474.888290] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:12:55 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0)

07:12:55 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6)

07:12:55 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x80ffff00000000, 0x0, 0x0)

07:12:55 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
getpgrp(0x0)
pidfd_open(0x0, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:12:55 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:12:55 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12)

07:12:55 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0)

[ 1474.941343] FAULT_INJECTION: forcing a failure.
[ 1474.941343] name failslab, interval 1, probability 0, space 0, times 0
[ 1474.942890] CPU: 1 PID: 9908 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1474.943626] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1474.944527] Call Trace:
[ 1474.944841]  dump_stack+0x107/0x167
[ 1474.945257]  should_fail.cold+0x5/0xa
[ 1474.945686]  ? __io_queue_sqe+0x666/0x9d0
[ 1474.946163]  should_failslab+0x5/0x20
[ 1474.946586]  kmem_cache_alloc_trace+0x55/0x320
[ 1474.947102]  __io_queue_sqe+0x666/0x9d0
[ 1474.947561]  ? io_issue_sqe+0x7660/0x7660
[ 1474.948025]  ? io_prep_rw+0x7f5/0x1050
[ 1474.948462]  io_submit_sqes+0x4461/0x85c0
[ 1474.948942]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1474.949483]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1474.950020]  ? lock_downgrade+0x6d0/0x6d0
[ 1474.950499]  ? find_held_lock+0x2c/0x110
[ 1474.950961]  ? io_submit_sqes+0x85c0/0x85c0
[ 1474.951445]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1474.951988]  ? wait_for_completion_io+0x270/0x270
[ 1474.952540]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1474.953060]  ? vfs_write+0x354/0xa70
[ 1474.953494]  ? fput_many+0x2f/0x1a0
[ 1474.953908]  ? ksys_write+0x1a9/0x260
[ 1474.954359]  ? __ia32_sys_read+0xb0/0xb0
[ 1474.954823]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1474.955417]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1474.955998]  do_syscall_64+0x33/0x40
[ 1474.956432]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1474.957015] RIP: 0033:0x7fa6f6a9fb19
[ 1474.957452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1474.959533] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1474.960421] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1474.961213] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1474.962025] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1474.962838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1474.963636] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
[ 1474.984076] FAULT_INJECTION: forcing a failure.
[ 1474.984076] name failslab, interval 1, probability 0, space 0, times 0
[ 1474.986904] CPU: 0 PID: 9913 Comm: syz-executor.4 Not tainted 5.10.180 #1
[ 1474.988480] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1474.990386] Call Trace:
[ 1474.991016]  dump_stack+0x107/0x167
[ 1474.991867]  should_fail.cold+0x5/0xa
[ 1474.992770]  ? create_object.isra.0+0x3a/0xa20
[ 1474.993859]  should_failslab+0x5/0x20
[ 1474.994753]  kmem_cache_alloc+0x5b/0x310
[ 1474.995708]  ? mark_held_locks+0x9e/0xe0
[ 1474.996673]  create_object.isra.0+0x3a/0xa20
[ 1474.997711]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1474.998914]  kmem_cache_alloc_bulk+0x168/0x320
[ 1474.999989]  io_submit_sqes+0x6f76/0x85c0
[ 1475.000972]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1475.002121]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1475.003238]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1475.004327]  ? lock_downgrade+0x6d0/0x6d0
[ 1475.005252]  ? find_held_lock+0x2c/0x110
[ 1475.006191]  ? io_submit_sqes+0x85c0/0x85c0
[ 1475.007183]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1475.008278]  ? wait_for_completion_io+0x270/0x270
[ 1475.009358]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1475.010408]  ? vfs_write+0x354/0xa70
[ 1475.011262]  ? fput_many+0x2f/0x1a0
[ 1475.012084]  ? ksys_write+0x1a9/0x260
[ 1475.012944]  ? __ia32_sys_read+0xb0/0xb0
[ 1475.013863]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1475.015045]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1475.016204]  do_syscall_64+0x33/0x40
[ 1475.017051]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1475.018201] RIP: 0033:0x7f987a861b19
[ 1475.019001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1475.022874] RSP: 002b:00007f9877dd7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1475.024496] RAX: ffffffffffffffda RBX: 00007f987a974f60 RCX: 00007f987a861b19
[ 1475.026014] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1475.027525] RBP: 00007f9877dd71d0 R08: 0000000000000000 R09: 0000000000000000
[ 1475.029020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1475.030550] R13: 00007fffe6ef9cbf R14: 00007f9877dd7300 R15: 0000000000022000
07:12:55 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:12:55 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0xc0ffff00000000, 0x0, 0x0)

07:12:55 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, 0x0, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:12:55 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x41015500, 0x20000000)

[ 1475.646021] udc-core: couldn't find an available UDC or it's busy
[ 1475.646815] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:12:56 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x80ffff, 0x0, 0x0, 0x0)

[ 1475.860121] FAULT_INJECTION: forcing a failure.
[ 1475.860121] name failslab, interval 1, probability 0, space 0, times 0
[ 1475.862701] CPU: 0 PID: 9944 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1475.864066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1475.865768] Call Trace:
[ 1475.866319]  dump_stack+0x107/0x167
[ 1475.867048]  should_fail.cold+0x5/0xa
[ 1475.867823]  ? create_object.isra.0+0x3a/0xa20
[ 1475.868747]  should_failslab+0x5/0x20
[ 1475.869513]  kmem_cache_alloc+0x5b/0x310
[ 1475.870358]  create_object.isra.0+0x3a/0xa20
[ 1475.871232]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1475.872243]  kmem_cache_alloc_trace+0x151/0x320
[ 1475.873174]  __io_queue_sqe+0x666/0x9d0
[ 1475.873969]  ? io_issue_sqe+0x7660/0x7660
[ 1475.874829]  ? io_prep_rw+0x7f5/0x1050
[ 1475.875625]  io_submit_sqes+0x4461/0x85c0
[ 1475.876507]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1475.877495]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1475.878504]  ? lock_downgrade+0x6d0/0x6d0
[ 1475.879328]  ? find_held_lock+0x2c/0x110
[ 1475.880147]  ? io_submit_sqes+0x85c0/0x85c0
[ 1475.881036]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1475.881999]  ? wait_for_completion_io+0x270/0x270
[ 1475.883014]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1475.883946]  ? vfs_write+0x354/0xa70
[ 1475.884717]  ? fput_many+0x2f/0x1a0
[ 1475.885451]  ? ksys_write+0x1a9/0x260
[ 1475.886240]  ? __ia32_sys_read+0xb0/0xb0
[ 1475.887052]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1475.888089]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1475.889111]  do_syscall_64+0x33/0x40
[ 1475.889853]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1475.890887] RIP: 0033:0x7fa6f6a9fb19
[ 1475.891627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1475.895396] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1475.897015] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1475.898554] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1475.900044] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1475.901583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1475.903116] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
07:12:56 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
getpgrp(0x0)
pidfd_open(0x0, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:12:56 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13)

07:12:56 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, 0x0, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:12:56 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0)

07:12:56 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, 0x0, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:13:10 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:13:10 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000)

07:13:10 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0)

07:13:10 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14)

07:13:10 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0xc0ffff, 0x0, 0x0, 0x0)

07:13:10 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x80085502, 0x20000000)

07:13:10 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:13:10 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7)

[ 1490.634878] FAULT_INJECTION: forcing a failure.
[ 1490.634878] name failslab, interval 1, probability 0, space 0, times 0
[ 1490.637796] CPU: 0 PID: 9981 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1490.639375] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1490.641243] Call Trace:
[ 1490.641872]  dump_stack+0x107/0x167
[ 1490.642729]  should_fail.cold+0x5/0xa
[ 1490.643603]  ? io_setup_async_rw+0x180/0x580
[ 1490.644613]  should_failslab+0x5/0x20
[ 1490.645489]  __kmalloc+0x72/0x390
[ 1490.646276]  ? mark_lock+0xf5/0x2df0
[ 1490.647163]  io_setup_async_rw+0x180/0x580
[ 1490.648134]  io_read+0xe98/0x11e0
[ 1490.648922]  ? __is_insn_slot_addr+0x14c/0x290
[ 1490.649965]  ? register_lock_class+0xbb/0x17b0
[ 1490.651016]  ? kiocb_done+0xc90/0xc90
[ 1490.651900]  ? __lock_acquire+0xbb1/0x5b00
[ 1490.652899]  ? __lock_acquire+0xbb1/0x5b00
[ 1490.653894]  io_issue_sqe+0x2e12/0x7660
[ 1490.654835]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1490.656045]  ? SOFTIRQ_verbose+0x10/0x10
[ 1490.656970]  ? __io_arm_poll_handler+0x59b/0x9e0
[ 1490.658059]  ? lock_downgrade+0x6d0/0x6d0
[ 1490.659015]  ? io_connect+0x610/0x610
[ 1490.659900]  ? lock_acquire+0x197/0x470
[ 1490.660794]  ? find_held_lock+0x2c/0x110
[ 1490.661749]  ? __fget_files+0x26d/0x4c0
[ 1490.662655]  ? lock_downgrade+0x6d0/0x6d0
[ 1490.663632]  __io_queue_sqe+0x90/0x9d0
[ 1490.664522]  ? io_issue_sqe+0x7660/0x7660
[ 1490.665448]  ? io_prep_rw+0x7f5/0x1050
[ 1490.666352]  io_submit_sqes+0x4461/0x85c0
[ 1490.667327]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1490.668436]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1490.669523]  ? lock_downgrade+0x6d0/0x6d0
[ 1490.670449]  ? find_held_lock+0x2c/0x110
[ 1490.671371]  ? io_submit_sqes+0x85c0/0x85c0
[ 1490.672353]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1490.673437]  ? wait_for_completion_io+0x270/0x270
[ 1490.674518]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1490.675556]  ? vfs_write+0x354/0xa70
[ 1490.676403]  ? fput_many+0x2f/0x1a0
[ 1490.677222]  ? ksys_write+0x1a9/0x260
[ 1490.678075]  ? __ia32_sys_read+0xb0/0xb0
[ 1490.679005]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1490.680174]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1490.681331]  do_syscall_64+0x33/0x40
[ 1490.682178]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1490.683326] RIP: 0033:0x7fa6f6a9fb19
[ 1490.684158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1490.688205] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1490.688751] udc-core: couldn't find an available UDC or it's busy
[ 1490.689901] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1490.689932] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1490.690667] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1490.692169] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1490.696074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1490.697615] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
07:13:11 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1490.747913] FAULT_INJECTION: forcing a failure.
[ 1490.747913] name failslab, interval 1, probability 0, space 0, times 0
[ 1490.750649] CPU: 0 PID: 9991 Comm: syz-executor.4 Not tainted 5.10.180 #1
[ 1490.752150] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1490.753956] Call Trace:
[ 1490.754541]  dump_stack+0x107/0x167
[ 1490.755341]  should_fail.cold+0x5/0xa
[ 1490.756172]  ? create_object.isra.0+0x3a/0xa20
[ 1490.757170]  should_failslab+0x5/0x20
[ 1490.757994]  kmem_cache_alloc+0x5b/0x310
[ 1490.758899]  ? mark_held_locks+0x9e/0xe0
[ 1490.759794]  create_object.isra.0+0x3a/0xa20
[ 1490.760752]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1490.761852]  kmem_cache_alloc_bulk+0x168/0x320
[ 1490.762868]  io_submit_sqes+0x6f76/0x85c0
[ 1490.763777]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1490.764852]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1490.765933]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1490.766999]  ? lock_downgrade+0x6d0/0x6d0
[ 1490.767896]  ? find_held_lock+0x2c/0x110
[ 1490.768787]  ? io_submit_sqes+0x85c0/0x85c0
[ 1490.769725]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1490.770790]  ? wait_for_completion_io+0x270/0x270
[ 1490.771832]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1490.772832]  ? vfs_write+0x354/0xa70
[ 1490.773638]  ? fput_many+0x2f/0x1a0
[ 1490.774435]  ? ksys_write+0x1a9/0x260
[ 1490.775257]  ? __ia32_sys_read+0xb0/0xb0
[ 1490.776138]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1490.777271]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1490.778409]  do_syscall_64+0x33/0x40
[ 1490.779222]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1490.780338] RIP: 0033:0x7f987a861b19
[ 1490.781148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1490.785128] RSP: 002b:00007f9877dd7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1490.786775] RAX: ffffffffffffffda RBX: 00007f987a974f60 RCX: 00007f987a861b19
[ 1490.788311] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1490.789844] RBP: 00007f9877dd71d0 R08: 0000000000000000 R09: 0000000000000000
[ 1490.791395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1490.792931] R13: 00007fffe6ef9cbf R14: 00007f9877dd7300 R15: 0000000000022000
07:13:11 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:13:11 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0)

07:13:11 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x60)

07:13:11 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:13:11 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:13:24 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000)

07:13:24 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:13:24 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000)

07:13:24 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15)

07:13:24 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:13:24 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x80086601, 0x20000000)

07:13:24 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0xffff8000, 0x0, 0x0, 0x0)

07:13:24 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8)

[ 1504.325042] FAULT_INJECTION: forcing a failure.
[ 1504.325042] name failslab, interval 1, probability 0, space 0, times 0
[ 1504.326391] CPU: 1 PID: 10030 Comm: syz-executor.4 Not tainted 5.10.180 #1
[ 1504.327140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1504.328027] Call Trace:
[ 1504.328329]  dump_stack+0x107/0x167
[ 1504.328737]  should_fail.cold+0x5/0xa
[ 1504.329158]  ? create_object.isra.0+0x3a/0xa20
[ 1504.329661]  should_failslab+0x5/0x20
[ 1504.330079]  kmem_cache_alloc+0x5b/0x310
[ 1504.330538]  ? mark_held_locks+0x9e/0xe0
[ 1504.330987]  create_object.isra.0+0x3a/0xa20
[ 1504.331467]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1504.332024]  kmem_cache_alloc_bulk+0x168/0x320
[ 1504.332527]  io_submit_sqes+0x6f76/0x85c0
[ 1504.332989]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1504.333536]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1504.334080]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1504.334623]  ? lock_downgrade+0x6d0/0x6d0
[ 1504.335076]  ? find_held_lock+0x2c/0x110
[ 1504.335530]  ? io_submit_sqes+0x85c0/0x85c0
[ 1504.336010]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1504.336542]  ? wait_for_completion_io+0x270/0x270
[ 1504.337080]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1504.337601]  ? vfs_write+0x354/0xa70
[ 1504.338018]  ? fput_many+0x2f/0x1a0
[ 1504.338424]  ? ksys_write+0x1a9/0x260
[ 1504.338850]  ? __ia32_sys_read+0xb0/0xb0
[ 1504.339302]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1504.339876]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1504.340445]  do_syscall_64+0x33/0x40
[ 1504.340858]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1504.341416] RIP: 0033:0x7f987a861b19
[ 1504.341832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1504.343827] RSP: 002b:00007f9877dd7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1504.344656] RAX: ffffffffffffffda RBX: 00007f987a974f60 RCX: 00007f987a861b19
[ 1504.345440] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1504.346219] RBP: 00007f9877dd71d0 R08: 0000000000000000 R09: 0000000000000000
[ 1504.347033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1504.347833] R13: 00007fffe6ef9cbf R14: 00007f9877dd7300 R15: 0000000000022000
[ 1504.352496] FAULT_INJECTION: forcing a failure.
[ 1504.352496] name failslab, interval 1, probability 0, space 0, times 0
[ 1504.355587] CPU: 0 PID: 10027 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1504.357125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1504.358981] Call Trace:
[ 1504.359591]  dump_stack+0x107/0x167
[ 1504.360413]  should_fail.cold+0x5/0xa
[ 1504.361275]  ? create_object.isra.0+0x3a/0xa20
[ 1504.362312]  should_failslab+0x5/0x20
[ 1504.363178]  kmem_cache_alloc+0x5b/0x310
[ 1504.364104]  create_object.isra.0+0x3a/0xa20
[ 1504.365092]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1504.366234]  __kmalloc+0x16e/0x390
[ 1504.367053]  io_setup_async_rw+0x180/0x580
[ 1504.368011]  io_read+0xe98/0x11e0
[ 1504.368796]  ? __is_insn_slot_addr+0x14c/0x290
[ 1504.369831]  ? register_lock_class+0xbb/0x17b0
[ 1504.370879]  ? kiocb_done+0xc90/0xc90
[ 1504.371765]  ? mark_lock+0xf5/0x2df0
[ 1504.372613]  ? lock_chain_count+0x20/0x20
[ 1504.373569]  ? __lock_acquire+0xbb1/0x5b00
[ 1504.374542]  io_issue_sqe+0x2e12/0x7660
[ 1504.375457]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1504.376621]  ? SOFTIRQ_verbose+0x10/0x10
[ 1504.377542]  ? __io_arm_poll_handler+0x59b/0x9e0
[ 1504.378603]  ? lock_downgrade+0x6d0/0x6d0
[ 1504.379545]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1504.380745]  ? io_connect+0x610/0x610
[ 1504.381608]  ? lock_acquire+0x197/0x470
[ 1504.382514]  ? find_held_lock+0x2c/0x110
[ 1504.383441]  ? __fget_files+0x26d/0x4c0
[ 1504.384334]  ? lock_downgrade+0x6d0/0x6d0
[ 1504.385271]  __io_queue_sqe+0x90/0x9d0
[ 1504.386152]  ? io_issue_sqe+0x7660/0x7660
[ 1504.387096]  ? io_prep_rw+0x7f5/0x1050
[ 1504.387977]  io_submit_sqes+0x4461/0x85c0
[ 1504.388957]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1504.390065]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1504.391164]  ? lock_downgrade+0x6d0/0x6d0
[ 1504.392084]  ? find_held_lock+0x2c/0x110
[ 1504.392998]  ? io_submit_sqes+0x85c0/0x85c0
[ 1504.393974]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1504.395070]  ? wait_for_completion_io+0x270/0x270
[ 1504.396145]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1504.397175]  ? vfs_write+0x354/0xa70
[ 1504.398025]  ? fput_many+0x2f/0x1a0
[ 1504.398853]  ? ksys_write+0x1a9/0x260
[ 1504.399720]  ? __ia32_sys_read+0xb0/0xb0
[ 1504.400642]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1504.401823]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1504.403007]  do_syscall_64+0x33/0x40
[ 1504.403857]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1504.404985] RIP: 0033:0x7fa6f6a9fb19
[ 1504.405824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1504.409896] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1504.411595] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1504.413183] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1504.414766] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1504.416327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1504.417902] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
[ 1504.421775] udc-core: couldn't find an available UDC or it's busy
[ 1504.423270] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:13:24 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:13:24 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:13:24 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:13:25 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:13:25 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x6000)

07:13:25 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0xffffc000, 0x0, 0x0, 0x0)

07:13:25 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:13:25 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000)

07:13:25 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x80087601, 0x20000000)

[ 1505.160303] udc-core: couldn't find an available UDC or it's busy
[ 1505.161830] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:13:39 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000)

07:13:39 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1519.046031] FAULT_INJECTION: forcing a failure.
[ 1519.046031] name failslab, interval 1, probability 0, space 0, times 0
[ 1519.047665] CPU: 1 PID: 10085 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1519.048453] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1519.049398] Call Trace:
[ 1519.049714]  dump_stack+0x107/0x167
[ 1519.050143]  should_fail.cold+0x5/0xa
[ 1519.050588]  ? __io_queue_sqe+0x666/0x9d0
[ 1519.051075]  should_failslab+0x5/0x20
[ 1519.051518]  kmem_cache_alloc_trace+0x55/0x320
[ 1519.052047]  __io_queue_sqe+0x666/0x9d0
[ 1519.052522]  ? io_issue_sqe+0x7660/0x7660
[ 1519.053000]  ? io_prep_rw+0x7f5/0x1050
[ 1519.053461]  io_submit_sqes+0x4461/0x85c0
[ 1519.053962]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1519.054538]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1519.055122]  ? lock_downgrade+0x6d0/0x6d0
[ 1519.055624]  ? find_held_lock+0x2c/0x110
[ 1519.056109]  ? io_submit_sqes+0x85c0/0x85c0
07:13:39 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9)

07:13:39 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x600000)

07:13:39 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16)

07:13:39 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:13:39 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x60, 0x0, 0x0)

07:13:39 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x83c0550b, 0x20000000)

[ 1519.056866]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1519.057588]  ? wait_for_completion_io+0x270/0x270
[ 1519.058164]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1519.058729]  ? vfs_write+0x354/0xa70
[ 1519.059182]  ? fput_many+0x2f/0x1a0
[ 1519.059633]  ? ksys_write+0x1a9/0x260
[ 1519.060087]  ? __ia32_sys_read+0xb0/0xb0
[ 1519.060590]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1519.061215]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1519.061839]  do_syscall_64+0x33/0x40
[ 1519.062293]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1519.062916] RIP: 0033:0x7fa6f6a9fb19
[ 1519.063364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1519.065533] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1519.066435] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1519.067293] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1519.068135] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1519.068986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1519.069835] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
[ 1519.082736] udc-core: couldn't find an available UDC or it's busy
[ 1519.083535] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1519.090912] FAULT_INJECTION: forcing a failure.
[ 1519.090912] name failslab, interval 1, probability 0, space 0, times 0
[ 1519.093656] CPU: 0 PID: 10083 Comm: syz-executor.4 Not tainted 5.10.180 #1
[ 1519.095194] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1519.096993] Call Trace:
[ 1519.097601]  dump_stack+0x107/0x167
[ 1519.098427]  should_fail.cold+0x5/0xa
[ 1519.099294]  ? create_object.isra.0+0x3a/0xa20
[ 1519.100315]  should_failslab+0x5/0x20
[ 1519.101175]  kmem_cache_alloc+0x5b/0x310
[ 1519.102090]  ? mark_held_locks+0x9e/0xe0
[ 1519.103010]  create_object.isra.0+0x3a/0xa20
[ 1519.103996]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1519.105134]  kmem_cache_alloc_bulk+0x168/0x320
[ 1519.106161]  io_submit_sqes+0x6f76/0x85c0
[ 1519.107113]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1519.108226]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1519.109332]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1519.110425]  ? lock_downgrade+0x6d0/0x6d0
[ 1519.111356]  ? find_held_lock+0x2c/0x110
[ 1519.112268]  ? io_submit_sqes+0x85c0/0x85c0
[ 1519.113236]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1519.114307]  ? wait_for_completion_io+0x270/0x270
[ 1519.115415]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1519.116450]  ? vfs_write+0x354/0xa70
[ 1519.117282]  ? fput_many+0x2f/0x1a0
[ 1519.118100]  ? ksys_write+0x1a9/0x260
[ 1519.118969]  ? __ia32_sys_read+0xb0/0xb0
[ 1519.119888]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1519.121054]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1519.122211]  do_syscall_64+0x33/0x40
[ 1519.123067]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1519.124198] RIP: 0033:0x7f987a861b19
[ 1519.125023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1519.129030] RSP: 002b:00007f9877dd7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1519.130720] RAX: ffffffffffffffda RBX: 00007f987a974f60 RCX: 00007f987a861b19
[ 1519.132290] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1519.133844] RBP: 00007f9877dd71d0 R08: 0000000000000000 R09: 0000000000000000
[ 1519.135426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1519.136991] R13: 00007fffe6ef9cbf R14: 00007f9877dd7300 R15: 0000000000022000
07:13:39 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:13:39 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:13:39 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0)

07:13:39 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:13:39 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

07:13:39 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1534.285213] udc-core: couldn't find an available UDC or it's busy
[ 1534.286001] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1534.296139] FAULT_INJECTION: forcing a failure.
[ 1534.296139] name failslab, interval 1, probability 0, space 0, times 0
[ 1534.297918] CPU: 1 PID: 10128 Comm: syz-executor.4 Not tainted 5.10.180 #1
[ 1534.298689] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1534.299617] Call Trace:
[ 1534.299927]  dump_stack+0x107/0x167
[ 1534.300343]  should_fail.cold+0x5/0xa
[ 1534.300777]  ? io_setup_async_rw+0x180/0x580
[ 1534.301278]  should_failslab+0x5/0x20
[ 1534.301707]  __kmalloc+0x72/0x390
[ 1534.302117]  io_setup_async_rw+0x180/0x580
[ 1534.302582]  io_read+0xe98/0x11e0
[ 1534.302990]  ? kiocb_done+0xc90/0xc90
[ 1534.303426]  ? stack_trace_consume_entry+0x160/0x160
[ 1534.304007]  ? lock_acquire+0x197/0x470
[ 1534.304450]  ? __lock_acquire+0xbb1/0x5b00
[ 1534.304933]  io_issue_sqe+0x2e12/0x7660
[ 1534.305387]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1534.305958]  ? SOFTIRQ_verbose+0x10/0x10
[ 1534.306409]  ? lock_chain_count+0x20/0x20
[ 1534.306891]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1534.307482]  ? io_connect+0x610/0x610
[ 1534.307917]  ? lock_acquire+0x197/0x470
[ 1534.308377]  ? find_held_lock+0x2c/0x110
[ 1534.308849]  ? __fget_files+0x26d/0x4c0
[ 1534.309305]  ? lock_downgrade+0x6d0/0x6d0
[ 1534.309776]  __io_queue_sqe+0x90/0x9d0
[ 1534.310219]  ? io_issue_sqe+0x7660/0x7660
[ 1534.310696]  ? io_prep_rw+0x7f5/0x1050
[ 1534.311150]  io_submit_sqes+0x4461/0x85c0
[ 1534.311635]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1534.312199]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1534.312739]  ? lock_downgrade+0x6d0/0x6d0
[ 1534.313210]  ? find_held_lock+0x2c/0x110
[ 1534.313674]  ? io_submit_sqes+0x85c0/0x85c0
[ 1534.314170]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1534.314710]  ? wait_for_completion_io+0x270/0x270
[ 1534.315259]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1534.315854]  ? vfs_write+0x354/0xa70
[ 1534.316256]  ? fput_many+0x2f/0x1a0
[ 1534.316668]  ? ksys_write+0x1a9/0x260
[ 1534.317065]  ? __ia32_sys_read+0xb0/0xb0
[ 1534.317520]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1534.318067]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1534.318645]  do_syscall_64+0x33/0x40
[ 1534.319066]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1534.319642] RIP: 0033:0x7f987a861b19
[ 1534.320041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1534.322110] RSP: 002b:00007f9877dd7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1534.322916] RAX: ffffffffffffffda RBX: 00007f987a974f60 RCX: 00007f987a861b19
[ 1534.323724] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1534.324477] RBP: 00007f9877dd71d0 R08: 0000000000000000 R09: 0000000000000000
[ 1534.325285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1534.326033] R13: 00007fffe6ef9cbf R14: 00007f9877dd7300 R15: 0000000000022000
07:13:54 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10)

07:13:54 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000)

07:13:54 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x6000, 0x0, 0x0)

07:13:54 executing program 6:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
getpgrp(0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

07:13:54 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:13:54 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0xc0045878, 0x20000000)

07:13:54 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000)

07:13:54 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17)

[ 1534.385128] FAULT_INJECTION: forcing a failure.
[ 1534.385128] name failslab, interval 1, probability 0, space 0, times 0
[ 1534.388046] CPU: 0 PID: 10138 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1534.389576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1534.391411] Call Trace:
[ 1534.392018]  dump_stack+0x107/0x167
[ 1534.392845]  should_fail.cold+0x5/0xa
[ 1534.393701]  ? create_object.isra.0+0x3a/0xa20
[ 1534.394720]  should_failslab+0x5/0x20
[ 1534.395587]  kmem_cache_alloc+0x5b/0x310
[ 1534.396513]  create_object.isra.0+0x3a/0xa20
[ 1534.397505]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1534.398652]  kmem_cache_alloc_trace+0x151/0x320
[ 1534.399723]  __io_queue_sqe+0x666/0x9d0
[ 1534.400626]  ? io_issue_sqe+0x7660/0x7660
[ 1534.401569]  ? io_prep_rw+0x7f5/0x1050
[ 1534.402460]  io_submit_sqes+0x4461/0x85c0
[ 1534.403449]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1534.404580]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1534.405661]  ? lock_downgrade+0x6d0/0x6d0
[ 1534.406586]  ? find_held_lock+0x2c/0x110
[ 1534.407519]  ? io_submit_sqes+0x85c0/0x85c0
[ 1534.408496]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1534.409577]  ? wait_for_completion_io+0x270/0x270
[ 1534.410658]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1534.411701]  ? vfs_write+0x354/0xa70
[ 1534.412548]  ? fput_many+0x2f/0x1a0
[ 1534.413378]  ? ksys_write+0x1a9/0x260
[ 1534.414237]  ? __ia32_sys_read+0xb0/0xb0
[ 1534.415174]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1534.416359]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1534.417518]  do_syscall_64+0x33/0x40
[ 1534.418363]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1534.419510] RIP: 0033:0x7fa6f6a9fb19
[ 1534.420355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1534.424394] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1534.426085] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1534.427674] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1534.429242] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1534.430821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1534.432394] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
07:13:54 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x600000, 0x0, 0x0)

07:13:55 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x83c0550b, 0x20000000)

07:13:55 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80ffff)

[ 1534.750864] udc-core: couldn't find an available UDC or it's busy
[ 1534.751731] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:13:55 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0)

07:13:55 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18)

07:13:55 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0xc0045878, 0x20000000)

[ 1534.967634] udc-core: couldn't find an available UDC or it's busy
[ 1534.968432] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1534.971493] FAULT_INJECTION: forcing a failure.
[ 1534.971493] name failslab, interval 1, probability 0, space 0, times 0
[ 1534.972952] CPU: 1 PID: 10167 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1534.973702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1534.974595] Call Trace:
[ 1534.974903]  dump_stack+0x107/0x167
[ 1534.975299]  should_fail.cold+0x5/0xa
[ 1534.975717]  ? io_setup_async_rw+0x180/0x580
[ 1534.976192]  should_failslab+0x5/0x20
[ 1534.976605]  __kmalloc+0x72/0x390
[ 1534.976973]  ? mark_lock+0xf5/0x2df0
[ 1534.977382]  io_setup_async_rw+0x180/0x580
[ 1534.977857]  io_read+0xe98/0x11e0
[ 1534.978225]  ? __is_insn_slot_addr+0x14c/0x290
[ 1534.978743]  ? kiocb_done+0xc90/0xc90
[ 1534.979185]  ? __lock_acquire+0xbb1/0x5b00
[ 1534.979680]  ? __lock_acquire+0xbb1/0x5b00
[ 1534.980153]  io_issue_sqe+0x2e12/0x7660
[ 1534.980606]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1534.981202]  ? SOFTIRQ_verbose+0x10/0x10
[ 1534.981662]  ? __io_arm_poll_handler+0x59b/0x9e0
[ 1534.982189]  ? lock_downgrade+0x6d0/0x6d0
[ 1534.982649]  ? io_connect+0x610/0x610
[ 1534.983066]  ? lock_acquire+0x197/0x470
[ 1534.983518]  ? find_held_lock+0x2c/0x110
[ 1534.983987]  ? __fget_files+0x26d/0x4c0
[ 1534.984441]  ? lock_downgrade+0x6d0/0x6d0
[ 1534.984914]  __io_queue_sqe+0x90/0x9d0
[ 1534.985353]  ? io_issue_sqe+0x7660/0x7660
[ 1534.985824]  ? io_prep_rw+0x7f5/0x1050
[ 1534.986263]  io_submit_sqes+0x4461/0x85c0
[ 1534.986753]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1534.987316]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1534.987867]  ? lock_downgrade+0x6d0/0x6d0
[ 1534.988327]  ? find_held_lock+0x2c/0x110
[ 1534.988785]  ? io_submit_sqes+0x85c0/0x85c0
[ 1534.989279]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1534.989830]  ? wait_for_completion_io+0x270/0x270
[ 1534.990374]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1534.990907]  ? vfs_write+0x354/0xa70
[ 1534.991329]  ? fput_many+0x2f/0x1a0
[ 1534.991720]  ? ksys_write+0x1a9/0x260
[ 1534.992146]  ? __ia32_sys_read+0xb0/0xb0
[ 1534.992605]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1534.993199]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1534.993796]  do_syscall_64+0x33/0x40
[ 1534.994210]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1534.994794] RIP: 0033:0x7fa6f6a9fb19
[ 1534.995229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1534.997296] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1534.998163] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1534.998982] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1534.999771] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1535.000533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1535.001342] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
07:13:55 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x80ffff, 0x0, 0x0)

07:13:55 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0xc0ffff, 0x0, 0x0)

07:14:09 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19)

07:14:09 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11)

[ 1549.300908] FAULT_INJECTION: forcing a failure.
[ 1549.300908] name failslab, interval 1, probability 0, space 0, times 0
[ 1549.303557] CPU: 0 PID: 10183 Comm: syz-executor.4 Not tainted 5.10.180 #1
[ 1549.305013] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1549.306751] Call Trace:
[ 1549.307352]  dump_stack+0x107/0x167
[ 1549.308130]  should_fail.cold+0x5/0xa
[ 1549.308946]  ? create_object.isra.0+0x3a/0xa20
[ 1549.309909]  should_failslab+0x5/0x20
[ 1549.310724]  kmem_cache_alloc+0x5b/0x310
[ 1549.311591]  create_object.isra.0+0x3a/0xa20
[ 1549.312517]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1549.313580]  __kmalloc+0x16e/0x390
[ 1549.314345]  io_setup_async_rw+0x180/0x580
[ 1549.315244]  io_read+0xe98/0x11e0
[ 1549.315999]  ? kiocb_done+0xc90/0xc90
[ 1549.316833]  ? stack_trace_consume_entry+0x160/0x160
[ 1549.317913]  ? lock_acquire+0x197/0x470
[ 1549.318757]  ? __lock_acquire+0xbb1/0x5b00
[ 1549.319671]  io_issue_sqe+0x2e12/0x7660
[ 1549.320521]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1549.321631]  ? SOFTIRQ_verbose+0x10/0x10
[ 1549.322488]  ? lock_chain_count+0x20/0x20
[ 1549.323380]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1549.324472]  ? io_connect+0x610/0x610
[ 1549.325371]  ? lock_acquire+0x197/0x470
[ 1549.326204]  ? find_held_lock+0x2c/0x110
[ 1549.327094]  ? __fget_files+0x26d/0x4c0
[ 1549.327934]  ? lock_downgrade+0x6d0/0x6d0
[ 1549.328821]  __io_queue_sqe+0x90/0x9d0
[ 1549.329648]  ? io_issue_sqe+0x7660/0x7660
[ 1549.330524]  ? io_prep_rw+0x7f5/0x1050
[ 1549.331359]  io_submit_sqes+0x4461/0x85c0
[ 1549.332292]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1549.333327]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1549.334358]  ? lock_downgrade+0x6d0/0x6d0
[ 1549.335230]  ? find_held_lock+0x2c/0x110
[ 1549.336103]  ? io_submit_sqes+0x85c0/0x85c0
[ 1549.337022]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1549.338057]  ? wait_for_completion_io+0x270/0x270
[ 1549.339086]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1549.339642] FAULT_INJECTION: forcing a failure.
[ 1549.339642] name failslab, interval 1, probability 0, space 0, times 0
[ 1549.340068]  ? vfs_write+0x354/0xa70
[ 1549.340108]  ? fput_many+0x2f/0x1a0
[ 1549.342858]  ? ksys_write+0x1a9/0x260
[ 1549.343683]  ? __ia32_sys_read+0xb0/0xb0
[ 1549.344541]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1549.345635]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1549.346699]  do_syscall_64+0x33/0x40
[ 1549.347494]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1549.348545] RIP: 0033:0x7f987a861b19
[ 1549.349329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1549.353078] RSP: 002b:00007f9877dd7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1549.354660] RAX: ffffffffffffffda RBX: 00007f987a974f60 RCX: 00007f987a861b19
[ 1549.356141] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1549.357633] RBP: 00007f9877dd71d0 R08: 0000000000000000 R09: 0000000000000000
[ 1549.359122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1549.360592] R13: 00007fffe6ef9cbf R14: 00007f9877dd7300 R15: 0000000000022000
[ 1549.362105] CPU: 1 PID: 10190 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1549.362919] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1549.363870] Call Trace:
[ 1549.364192]  dump_stack+0x107/0x167
[ 1549.364619]  should_fail.cold+0x5/0xa
[ 1549.365067]  ? create_object.isra.0+0x3a/0xa20
[ 1549.365613]  should_failslab+0x5/0x20
[ 1549.366067]  kmem_cache_alloc+0x5b/0x310
[ 1549.366530]  create_object.isra.0+0x3a/0xa20
[ 1549.367047]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1549.367650]  __kmalloc+0x16e/0x390
[ 1549.368081]  io_setup_async_rw+0x180/0x580
[ 1549.368583]  io_read+0xe98/0x11e0
[ 1549.368988]  ? __is_insn_slot_addr+0x14c/0x290
[ 1549.369529]  ? kiocb_done+0xc90/0xc90
[ 1549.369967]  ? __lock_acquire+0xbb1/0x5b00
07:14:09 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0)

07:14:09 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:14:09 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x83c0550b, 0x20000000)

07:14:09 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:14:09 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc0ffff)

07:14:09 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0xc0085508, 0x20000000)

[ 1549.370540]  ? __lock_acquire+0xbb1/0x5b00
[ 1549.371234]  io_issue_sqe+0x2e12/0x7660
[ 1549.371706]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1549.372311]  ? SOFTIRQ_verbose+0x10/0x10
[ 1549.372763]  ? __io_arm_poll_handler+0x59b/0x9e0
[ 1549.373310]  ? lock_downgrade+0x6d0/0x6d0
[ 1549.373768]  ? io_connect+0x610/0x610
[ 1549.374218]  ? lock_acquire+0x197/0x470
[ 1549.374665]  ? find_held_lock+0x2c/0x110
[ 1549.375155]  ? __fget_files+0x26d/0x4c0
[ 1549.375612]  ? lock_downgrade+0x6d0/0x6d0
[ 1549.376104]  __io_queue_sqe+0x90/0x9d0
[ 1549.376552]  ? io_issue_sqe+0x7660/0x7660
[ 1549.377040]  ? io_prep_rw+0x7f5/0x1050
[ 1549.377497]  io_submit_sqes+0x4461/0x85c0
[ 1549.378004]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1549.378571]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1549.379147]  ? lock_downgrade+0x6d0/0x6d0
[ 1549.379617]  ? find_held_lock+0x2c/0x110
[ 1549.380099]  ? io_submit_sqes+0x85c0/0x85c0
[ 1549.380608]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1549.381174]  ? wait_for_completion_io+0x270/0x270
[ 1549.381721]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1549.382261]  ? vfs_write+0x354/0xa70
[ 1549.382681]  ? fput_many+0x2f/0x1a0
[ 1549.382959] udc-core: couldn't find an available UDC or it's busy
[ 1549.383128]  ? ksys_write+0x1a9/0x260
[ 1549.384440] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1549.384840]  ? __ia32_sys_read+0xb0/0xb0
[ 1549.386648]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1549.387255]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1549.387867]  do_syscall_64+0x33/0x40
[ 1549.388288]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1549.388882] RIP: 0033:0x7fa6f6a9fb19
[ 1549.389299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1549.391400] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1549.392230] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1549.392644] udc-core: couldn't find an available UDC or it's busy
[ 1549.393033] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1549.393058] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1549.394371] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1549.395142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1549.395166] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
07:14:09 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0xffff8000, 0x0, 0x0)

07:14:09 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0xffffc000, 0x0, 0x0)

07:14:10 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x60000000000000, 0x0, 0x0)

07:14:10 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:14:10 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x80085502, 0x20000000)

[ 1550.165644] udc-core: couldn't find an available UDC or it's busy
[ 1550.166996] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:14:10 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20)

07:14:10 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0xc0189436, 0x20000000)

[ 1550.305884] FAULT_INJECTION: forcing a failure.
[ 1550.305884] name failslab, interval 1, probability 0, space 0, times 0
[ 1550.308543] CPU: 0 PID: 10226 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1550.309957] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1550.311676] Call Trace:
[ 1550.312220]  dump_stack+0x107/0x167
[ 1550.312970]  should_fail.cold+0x5/0xa
[ 1550.313761]  ? create_object.isra.0+0x3a/0xa20
[ 1550.314700]  should_failslab+0x5/0x20
[ 1550.315489]  kmem_cache_alloc+0x5b/0x310
[ 1550.316321]  create_object.isra.0+0x3a/0xa20
[ 1550.317214]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1550.318247]  kmem_cache_alloc_trace+0x151/0x320
[ 1550.319203]  __io_queue_sqe+0x666/0x9d0
[ 1550.320015]  ? io_issue_sqe+0x7660/0x7660
[ 1550.320858]  ? io_prep_rw+0x7f5/0x1050
[ 1550.321653]  io_submit_sqes+0x4461/0x85c0
[ 1550.322525]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1550.323551]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1550.324540]  ? lock_downgrade+0x6d0/0x6d0
[ 1550.325383]  ? find_held_lock+0x2c/0x110
[ 1550.326218]  ? io_submit_sqes+0x85c0/0x85c0
[ 1550.327101]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1550.328074]  ? wait_for_completion_io+0x270/0x270
[ 1550.329042]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1550.329976]  ? vfs_write+0x354/0xa70
[ 1550.330746]  ? fput_many+0x2f/0x1a0
[ 1550.331515]  ? ksys_write+0x1a9/0x260
[ 1550.332303]  ? __ia32_sys_read+0xb0/0xb0
[ 1550.333123]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1550.334173]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1550.335236]  do_syscall_64+0x33/0x40
[ 1550.335992]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1550.337036] RIP: 0033:0x7fa6f6a9fb19
[ 1550.337789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1550.341540] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1550.343095] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1550.344552] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1550.346012] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1550.347473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1550.348922] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
[ 1550.356814] udc-core: couldn't find an available UDC or it's busy
[ 1550.357593] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:14:10 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000)

07:14:10 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf423cd48b8540625, 0x810, 0xffffffffffffffff, 0x8000000)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x2)

07:14:10 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0)

07:14:24 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x80085502, 0x20000000)

07:14:24 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:14:24 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21)

07:14:24 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffff8000)

07:14:24 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12)

07:14:24 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0xa56, 0xa056, 0x0, &(0x7f0000000180)={[0x7]}, 0x8)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={<r5=>0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f00000000c0))
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r5, 0x0, 0x0, 0x0, 0x2, 0x0, {0x2}}, 0x2)

07:14:24 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x80ffff00000000, 0x0, 0x0)

07:14:24 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0xc020660b, 0x20000000)

[ 1564.562647] udc-core: couldn't find an available UDC or it's busy
[ 1564.564079] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1564.583714] udc-core: couldn't find an available UDC or it's busy
[ 1564.585263] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1564.596109] FAULT_INJECTION: forcing a failure.
[ 1564.596109] name failslab, interval 1, probability 0, space 0, times 0
[ 1564.598700] CPU: 0 PID: 10262 Comm: syz-executor.4 Not tainted 5.10.180 #1
[ 1564.599617] FAULT_INJECTION: forcing a failure.
[ 1564.599617] name failslab, interval 1, probability 0, space 0, times 0
[ 1564.600194] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1564.600203] Call Trace:
[ 1564.600242]  dump_stack+0x107/0x167
[ 1564.600281]  should_fail.cold+0x5/0xa
[ 1564.606344]  ? __io_queue_sqe+0x666/0x9d0
[ 1564.607233]  should_failslab+0x5/0x20
[ 1564.608054]  kmem_cache_alloc_trace+0x55/0x320
[ 1564.609013]  __io_queue_sqe+0x666/0x9d0
[ 1564.609864]  ? io_issue_sqe+0x7660/0x7660
[ 1564.610751]  ? io_prep_rw+0x7f5/0x1050
[ 1564.611603]  io_submit_sqes+0x4461/0x85c0
[ 1564.612520]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1564.613572]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1564.614610]  ? lock_downgrade+0x6d0/0x6d0
[ 1564.615494]  ? find_held_lock+0x2c/0x110
[ 1564.616368]  ? io_submit_sqes+0x85c0/0x85c0
[ 1564.617290]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1564.618310]  ? wait_for_completion_io+0x270/0x270
[ 1564.619351]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1564.620327]  ? vfs_write+0x354/0xa70
[ 1564.621118]  ? fput_many+0x2f/0x1a0
[ 1564.621894]  ? ksys_write+0x1a9/0x260
[ 1564.622706]  ? __ia32_sys_read+0xb0/0xb0
[ 1564.623604]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1564.624709]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1564.625799]  do_syscall_64+0x33/0x40
[ 1564.626593]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1564.627668] RIP: 0033:0x7f987a861b19
[ 1564.628459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1564.632276] RSP: 002b:00007f9877dd7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1564.633876] RAX: ffffffffffffffda RBX: 00007f987a974f60 RCX: 00007f987a861b19
[ 1564.635368] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1564.636844] RBP: 00007f9877dd71d0 R08: 0000000000000000 R09: 0000000000000000
[ 1564.638327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1564.639811] R13: 00007fffe6ef9cbf R14: 00007f9877dd7300 R15: 0000000000022000
[ 1564.641390] CPU: 1 PID: 10261 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1564.642828] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1564.644521] Call Trace:
[ 1564.645072]  dump_stack+0x107/0x167
[ 1564.645833]  should_fail.cold+0x5/0xa
[ 1564.646611]  ? create_object.isra.0+0x3a/0xa20
[ 1564.647573]  should_failslab+0x5/0x20
[ 1564.648365]  kmem_cache_alloc+0x5b/0x310
[ 1564.649220]  create_object.isra.0+0x3a/0xa20
[ 1564.650130]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1564.651160]  kmem_cache_alloc_trace+0x151/0x320
[ 1564.652172]  __io_queue_sqe+0x666/0x9d0
[ 1564.652992]  ? io_issue_sqe+0x7660/0x7660
[ 1564.653847]  ? io_prep_rw+0x7f5/0x1050
[ 1564.654649]  io_submit_sqes+0x4461/0x85c0
[ 1564.655546]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1564.656561]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1564.657552]  ? lock_downgrade+0x6d0/0x6d0
[ 1564.658404]  ? find_held_lock+0x2c/0x110
[ 1564.659241]  ? io_submit_sqes+0x85c0/0x85c0
[ 1564.660135]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1564.661119]  ? wait_for_completion_io+0x270/0x270
[ 1564.662114]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1564.663068]  ? vfs_write+0x354/0xa70
[ 1564.663844]  ? fput_many+0x2f/0x1a0
[ 1564.664593]  ? ksys_write+0x1a9/0x260
[ 1564.665369]  ? __ia32_sys_read+0xb0/0xb0
[ 1564.666202]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1564.667276]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1564.668341]  do_syscall_64+0x33/0x40
[ 1564.669100]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1564.670142] RIP: 0033:0x7fa6f6a9fb19
[ 1564.670897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1564.674644] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1564.676205] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1564.677658] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1564.679155] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1564.680610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1564.682067] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
07:14:25 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x80085502, 0x20000000)

07:14:25 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0xc0ffff00000000, 0x0, 0x0)

07:14:25 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0xc0085504, 0x20c00000)

[ 1565.331539] udc-core: couldn't find an available UDC or it's busy
[ 1565.333113] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:14:25 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22)

[ 1565.408184] udc-core: couldn't find an available UDC or it's busy
[ 1565.409537] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:14:25 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffc000)

[ 1565.455014] FAULT_INJECTION: forcing a failure.
[ 1565.455014] name failslab, interval 1, probability 0, space 0, times 0
[ 1565.457615] CPU: 1 PID: 10285 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1565.458866] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1565.460386] Call Trace:
[ 1565.460860]  dump_stack+0x107/0x167
[ 1565.461514]  should_fail.cold+0x5/0xa
[ 1565.462203]  ? io_setup_async_rw+0x180/0x580
[ 1565.462984]  should_failslab+0x5/0x20
[ 1565.463673]  __kmalloc+0x72/0x390
[ 1565.464282]  ? mark_lock+0xf5/0x2df0
[ 1565.464939]  io_setup_async_rw+0x180/0x580
[ 1565.465712]  io_read+0xe98/0x11e0
[ 1565.466355]  ? __is_insn_slot_addr+0x14c/0x290
[ 1565.467192]  ? kiocb_done+0xc90/0xc90
[ 1565.467904]  ? __lock_acquire+0xbb1/0x5b00
[ 1565.468702]  ? __lock_acquire+0xbb1/0x5b00
[ 1565.469470]  io_issue_sqe+0x2e12/0x7660
[ 1565.470173]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1565.471122]  ? SOFTIRQ_verbose+0x10/0x10
[ 1565.471854]  ? __io_arm_poll_handler+0x59b/0x9e0
[ 1565.472724]  ? lock_downgrade+0x6d0/0x6d0
[ 1565.473458]  ? io_connect+0x610/0x610
[ 1565.474159]  ? lock_acquire+0x197/0x470
[ 1565.474851]  ? find_held_lock+0x2c/0x110
[ 1565.475607]  ? __fget_files+0x26d/0x4c0
[ 1565.476321]  ? lock_downgrade+0x6d0/0x6d0
[ 1565.477083]  __io_queue_sqe+0x90/0x9d0
[ 1565.477788]  ? io_issue_sqe+0x7660/0x7660
[ 1565.478540]  ? io_prep_rw+0x7f5/0x1050
[ 1565.479254]  io_submit_sqes+0x4461/0x85c0
[ 1565.480018]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1565.480921]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1565.481784]  ? lock_downgrade+0x6d0/0x6d0
[ 1565.482548]  ? find_held_lock+0x2c/0x110
[ 1565.483295]  ? io_submit_sqes+0x85c0/0x85c0
[ 1565.484079]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1565.484958]  ? wait_for_completion_io+0x270/0x270
[ 1565.485843]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1565.486692]  ? vfs_write+0x354/0xa70
[ 1565.487386]  ? fput_many+0x2f/0x1a0
[ 1565.488038]  ? ksys_write+0x1a9/0x260
[ 1565.488719]  ? __ia32_sys_read+0xb0/0xb0
[ 1565.489470]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1565.490432]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1565.491396]  do_syscall_64+0x33/0x40
[ 1565.492075]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1565.493013] RIP: 0033:0x7fa6f6a9fb19
[ 1565.493680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1565.497026] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1565.498404] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1565.499696] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1565.500988] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1565.502292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1565.503597] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
07:14:25 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:14:26 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x80085502, 0x20000000)

07:14:26 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23)

[ 1566.044288] udc-core: couldn't find an available UDC or it's busy
[ 1566.045124] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1566.119008] FAULT_INJECTION: forcing a failure.
[ 1566.119008] name failslab, interval 1, probability 0, space 0, times 0
[ 1566.121658] CPU: 0 PID: 10301 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1566.123063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1566.124780] Call Trace:
[ 1566.125336]  dump_stack+0x107/0x167
[ 1566.126091]  should_fail.cold+0x5/0xa
[ 1566.126870]  ? create_object.isra.0+0x3a/0xa20
[ 1566.127812]  should_failslab+0x5/0x20
[ 1566.128582]  kmem_cache_alloc+0x5b/0x310
[ 1566.129414]  create_object.isra.0+0x3a/0xa20
[ 1566.130310]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1566.131348]  __kmalloc+0x16e/0x390
[ 1566.132077]  io_setup_async_rw+0x180/0x580
[ 1566.132932]  io_read+0xe98/0x11e0
[ 1566.133642]  ? __is_insn_slot_addr+0x14c/0x290
[ 1566.134591]  ? kiocb_done+0xc90/0xc90
[ 1566.135391]  ? __lock_acquire+0xbb1/0x5b00
[ 1566.136279]  ? __lock_acquire+0xbb1/0x5b00
[ 1566.137138]  io_issue_sqe+0x2e12/0x7660
[ 1566.137973]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1566.139031]  ? SOFTIRQ_verbose+0x10/0x10
[ 1566.139857]  ? __io_arm_poll_handler+0x59b/0x9e0
[ 1566.140822]  ? lock_downgrade+0x6d0/0x6d0
[ 1566.141652]  ? io_connect+0x610/0x610
[ 1566.142444]  ? lock_acquire+0x197/0x470
[ 1566.143247]  ? find_held_lock+0x2c/0x110
[ 1566.144078]  ? __fget_files+0x26d/0x4c0
[ 1566.144887]  ? lock_downgrade+0x6d0/0x6d0
[ 1566.145739]  __io_queue_sqe+0x90/0x9d0
[ 1566.146525]  ? io_issue_sqe+0x7660/0x7660
[ 1566.147398]  ? io_prep_rw+0x7f5/0x1050
[ 1566.148194]  io_submit_sqes+0x4461/0x85c0
[ 1566.149065]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1566.150060]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1566.151050]  ? lock_downgrade+0x6d0/0x6d0
[ 1566.151884]  ? find_held_lock+0x2c/0x110
[ 1566.152722]  ? io_submit_sqes+0x85c0/0x85c0
[ 1566.153598]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1566.154574]  ? wait_for_completion_io+0x270/0x270
[ 1566.155554]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1566.156494]  ? vfs_write+0x354/0xa70
[ 1566.157240]  ? fput_many+0x2f/0x1a0
[ 1566.157971]  ? ksys_write+0x1a9/0x260
[ 1566.158735]  ? __ia32_sys_read+0xb0/0xb0
[ 1566.159571]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1566.160624]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1566.161683]  do_syscall_64+0x33/0x40
[ 1566.162432]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1566.163475] RIP: 0033:0x7fa6f6a9fb19
[ 1566.164234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1566.167958] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1566.169490] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1566.170952] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1566.172397] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1566.173825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1566.175267] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
[ 1582.900439] udc-core: couldn't find an available UDC or it's busy
[ 1582.901221] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:14:43 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x80085502, 0x20000000)

07:14:43 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24)

07:14:43 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x60000000000000)

07:14:43 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:14:43 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:14:43 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0xc0085504, 0xff600000)

07:14:43 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@remote}, 0x0, @in=@private}}, &(0x7f0000000080)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000180)={'ip6gre0\x00', r6, 0x2f, 0x80, 0x7, 0x7, 0x1, @remote, @dev={0xfe, 0x80, '\x00', 0x43}, 0x20, 0x80, 0x2}})
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000240)=0x9)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r7 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0)
io_uring_enter(r7, 0x58ab, 0x0, 0x0, 0x0, 0x0)
ftruncate(r7, 0x6)

07:14:43 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0)

[ 1582.956466] udc-core: couldn't find an available UDC or it's busy
[ 1582.957231] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1582.998819] FAULT_INJECTION: forcing a failure.
[ 1582.998819] name failslab, interval 1, probability 0, space 0, times 0
[ 1583.001540] CPU: 0 PID: 10321 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1583.002984] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1583.004741] Call Trace:
[ 1583.005317]  dump_stack+0x107/0x167
[ 1583.006111]  should_fail.cold+0x5/0xa
[ 1583.006931]  ? __io_queue_sqe+0x666/0x9d0
[ 1583.007845]  should_failslab+0x5/0x20
[ 1583.008670]  kmem_cache_alloc_trace+0x55/0x320
[ 1583.009639]  __io_queue_sqe+0x666/0x9d0
[ 1583.010492]  ? io_issue_sqe+0x7660/0x7660
[ 1583.011383]  ? io_prep_rw+0x7f5/0x1050
[ 1583.012223]  io_submit_sqes+0x4461/0x85c0
[ 1583.013140]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1583.014195]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1583.015216]  ? lock_downgrade+0x6d0/0x6d0
[ 1583.016107]  ? find_held_lock+0x2c/0x110
[ 1583.016978]  ? io_submit_sqes+0x85c0/0x85c0
[ 1583.017908]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1583.018931]  ? wait_for_completion_io+0x270/0x270
[ 1583.019966]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1583.020942]  ? vfs_write+0x354/0xa70
[ 1583.021737]  ? fput_many+0x2f/0x1a0
[ 1583.022518]  ? ksys_write+0x1a9/0x260
[ 1583.023325]  ? __ia32_sys_read+0xb0/0xb0
[ 1583.024208]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1583.025320]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1583.026407]  do_syscall_64+0x33/0x40
[ 1583.027196]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1583.028274] RIP: 0033:0x7fa6f6a9fb19
[ 1583.029072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1583.032892] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1583.034491] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1583.035999] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1583.037492] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1583.038979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1583.040477] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
07:14:43 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0)
io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r5, 0x8000000)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x10010, r3, 0x8000000)
syz_io_uring_submit(r7, r2, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x1, {0x0, r0}, 0x1, 0xa, 0x0, {0x0, 0x0, r6}}, 0xffc3)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:14:43 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x80085502, 0x20000000)

07:14:43 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1583.498364] udc-core: couldn't find an available UDC or it's busy
[ 1583.499087] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:14:43 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0xc0085504, 0x7ffffffff000)

07:14:43 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000)

[ 1583.575286] udc-core: couldn't find an available UDC or it's busy
[ 1583.577126] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:14:43 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000340))
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:14:44 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x60)

07:14:44 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25)

07:14:44 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x80085502, 0x20000000)

07:14:44 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80ffff00000000)

[ 1584.062583] FAULT_INJECTION: forcing a failure.
[ 1584.062583] name failslab, interval 1, probability 0, space 0, times 0
[ 1584.064116] CPU: 1 PID: 10360 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1584.064863] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1584.065757] Call Trace:
[ 1584.066049]  dump_stack+0x107/0x167
[ 1584.066456]  should_fail.cold+0x5/0xa
[ 1584.066871]  ? create_object.isra.0+0x3a/0xa20
[ 1584.067382]  should_failslab+0x5/0x20
[ 1584.067799]  kmem_cache_alloc+0x5b/0x310
[ 1584.068252]  create_object.isra.0+0x3a/0xa20
[ 1584.068725]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1584.069283]  kmem_cache_alloc_trace+0x151/0x320
[ 1584.069793]  __io_queue_sqe+0x666/0x9d0
[ 1584.070225]  ? io_issue_sqe+0x7660/0x7660
[ 1584.070675]  ? io_prep_rw+0x7f5/0x1050
[ 1584.071105]  io_submit_sqes+0x4461/0x85c0
[ 1584.071588]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1584.072130]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1584.072645]  ? lock_downgrade+0x6d0/0x6d0
[ 1584.073086]  ? find_held_lock+0x2c/0x110
[ 1584.073527]  ? io_submit_sqes+0x85c0/0x85c0
[ 1584.073994]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1584.074529]  ? wait_for_completion_io+0x270/0x270
[ 1584.075044]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1584.075552]  ? vfs_write+0x354/0xa70
[ 1584.075951]  ? fput_many+0x2f/0x1a0
[ 1584.076344]  ? ksys_write+0x1a9/0x260
[ 1584.076764]  ? __ia32_sys_read+0xb0/0xb0
[ 1584.077204]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1584.077780]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1584.078329]  do_syscall_64+0x33/0x40
[ 1584.078725]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1584.079276] RIP: 0033:0x7fa6f6a9fb19
[ 1584.079689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1584.081656] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1584.082461] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1584.083249] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1584.084031] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1584.084798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1584.085562] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
[ 1584.119772] udc-core: couldn't find an available UDC or it's busy
[ 1584.121374] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:14:44 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0xc0085504, 0xffffffffff600000)

07:14:44 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1584.430377] udc-core: couldn't find an available UDC or it's busy
[ 1584.432018] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:14:57 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRESOCT=r0, @ANYRESHEX=r0], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0xc0085504, 0x20000000)

07:14:57 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:14:57 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc0ffff00000000)

07:14:57 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x80085502, 0x20000000)

07:14:57 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000)

07:14:57 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26)

07:14:57 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0)

07:14:57 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x10d180, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={<r5=>0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x80010, r5, 0x8000000)
syz_io_uring_submit(r6, r2, &(0x7f0000000080), 0x6)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1597.710832] FAULT_INJECTION: forcing a failure.
[ 1597.710832] name failslab, interval 1, probability 0, space 0, times 0
[ 1597.710858] udc-core: couldn't find an available UDC or it's busy
[ 1597.712319] CPU: 1 PID: 10397 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1597.713553] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1597.714200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1597.714215] Call Trace:
[ 1597.716736]  dump_stack+0x107/0x167
[ 1597.717116]  should_fail.cold+0x5/0xa
[ 1597.717520]  ? io_setup_async_rw+0x180/0x580
[ 1597.717974]  should_failslab+0x5/0x20
[ 1597.718364]  __kmalloc+0x72/0x390
[ 1597.718725]  ? mark_lock+0xf5/0x2df0
[ 1597.719112]  io_setup_async_rw+0x180/0x580
[ 1597.719547]  io_read+0xe98/0x11e0
[ 1597.719927]  ? __is_insn_slot_addr+0x14c/0x290
[ 1597.720406]  ? kiocb_done+0xc90/0xc90
[ 1597.720822]  ? __lock_acquire+0xbb1/0x5b00
[ 1597.721313]  ? __lock_acquire+0xbb1/0x5b00
[ 1597.721784]  io_issue_sqe+0x2e12/0x7660
[ 1597.722004] udc-core: couldn't find an available UDC or it's busy
[ 1597.722232]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1597.722263]  ? SOFTIRQ_verbose+0x10/0x10
[ 1597.723553] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1597.724094]  ? __io_arm_poll_handler+0x59b/0x9e0
[ 1597.726084]  ? lock_downgrade+0x6d0/0x6d0
[ 1597.726546]  ? io_connect+0x610/0x610
[ 1597.726978]  ? lock_acquire+0x197/0x470
[ 1597.727416]  ? find_held_lock+0x2c/0x110
[ 1597.727887]  ? __fget_files+0x26d/0x4c0
[ 1597.728333]  ? lock_downgrade+0x6d0/0x6d0
[ 1597.728799]  __io_queue_sqe+0x90/0x9d0
[ 1597.729235]  ? io_issue_sqe+0x7660/0x7660
[ 1597.729698]  ? io_prep_rw+0x7f5/0x1050
[ 1597.730132]  io_submit_sqes+0x4461/0x85c0
[ 1597.730584]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1597.731133]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1597.731666]  ? lock_downgrade+0x6d0/0x6d0
[ 1597.732110]  ? find_held_lock+0x2c/0x110
[ 1597.732574]  ? io_submit_sqes+0x85c0/0x85c0
[ 1597.733068]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1597.733613]  ? wait_for_completion_io+0x270/0x270
[ 1597.734145]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1597.734653]  ? vfs_write+0x354/0xa70
[ 1597.735076]  ? fput_many+0x2f/0x1a0
[ 1597.735482]  ? ksys_write+0x1a9/0x260
[ 1597.735882]  ? __ia32_sys_read+0xb0/0xb0
[ 1597.736342]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1597.736939]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1597.737515]  do_syscall_64+0x33/0x40
[ 1597.737932]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1597.738498] RIP: 0033:0x7fa6f6a9fb19
[ 1597.738907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1597.740793] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1597.741633] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1597.742369] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1597.743153] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1597.743952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1597.744729] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
07:14:58 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={<r5=>0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
connect$packet(r6, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0x1f, 0x6, @remote}, 0x14)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x30, 0xffffffffffffffff, 0x0)
r8 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0)
r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0)
syz_io_uring_submit(r12, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
syz_io_uring_submit(r7, r10, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, r5, &(0x7f0000000340), &(0x7f00000000c0)='./file0\x00', 0x2, 0x6000}, 0x1)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:14:58 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x6000)

07:14:58 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:14:58 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x0, @fd=r3, 0xfffffffffffffffa, 0x0, 0x0, 0x2}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={<r5=>0x0, 0x0}, 0x4000)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
pidfd_getfd(r7, r6, 0x0)
r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
pidfd_getfd(r9, r8, 0x0)
pidfd_getfd(r7, r9, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r6, 0x2402, 0x4690)
ioctl$HIDIOCAPPLICATION(r5, 0x4802, 0x17)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:14:58 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27)

07:14:58 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r4=>0x0}, 0x0)
vmsplice(r4, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r7=>0x0})
sendto$packet(r5, &(0x7f0000000080)="d4353902a8fc482a86ebe2be6558", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendto$packet(r4, &(0x7f0000000340)="ab662c1c8cbe03b8a18f6aff4b4320697cbc7d382ca2b35af064328181a39efa88bc1c7b3d4193e3171e90703ac01ca7efead3288d3c1fdb181f43ae5abe0ac01dd243b124d76354d7c122f22ec843cd5b1a772b4b220874ed85eb989c5a9f1d8a502ae3393c1f394c4c4579c5eb3f8254069a501fcc29d416d01125dc01cf5f9d33", 0x82, 0xd0, &(0x7f0000000080)={0x11, 0x4, r7, 0x1, 0x2, 0x6, @local}, 0x14)
close(r3)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:14:58 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x80085502, 0x20000000)

07:14:58 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x7e, &(0x7f0000000080)={{0x12, 0x1, 0x3807e1485aacc3aa, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x1, 0x1, 0x8, 0x80, 0x1f, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x9, 0x24, 0x6, 0x0, 0x0, "acb4e0bd"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x72, 0xd400, 0x9}, [@obex={0x5, 0x24, 0x15, 0x368c}, @mdlm={0x15, 0x24, 0x12, 0xff}, @dmm={0x7, 0x24, 0x14, 0x1, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x80}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0x0, 0x5, 0x40}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x1, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0xd9, 0x6}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x2c, 0x4, 0x3b, 0x40, 0x20}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1004}}, {0xd0, &(0x7f00000001c0)=@string={0xd0, 0x3, "c2c4fe1c7de4ab1d0207d32bb5111b776aa52c5f24d6196ce0181842887704924d23c9a2dd749cc705eec61214a85a6fa44ba82a2561d5e4ba7db50c8f96ae17f84fc2cd16818b51dff77e95910efb09bb6757fb34ea6cd2d70dc32a9ca174b86784a0179982635070eb0ea0bd4b287d09ed36c4d1f6f981341e333a2cd5589e39202cfd6ac1261964c43a3f02f985317b6f073d9f0e78b52807f2caf72f5f6cf7c8dd6952e1ef23a6c310d43168cb6e6a843db6280bf62e23cda217b1751852a3aff8dba68fc8d00c68894dfa88"}}, {0xae, &(0x7f00000002c0)=ANY=[@ANYBLOB="ae03e1a2315018a2932d36b338ad5f5ffb8755e378b6f08240d4edb320af0f7a4b7be4ed08d748ae0a396103d815ec0ce23cc16514ea410b2365907d0e56fd3091d65ffe65491b5fb5626669e780d2b73277ad25a0bdda24b994b6aa7f14fa648effb6df7a024d7078a34dfdbef0714d7eb4f5214122fad7b544ed19d7751d3264a678f939a2c35a138fbf1e320700490be4458f4447016531ac928b6b46d5509739f28912c2a98edd8cb6bbb00b"]}]})
r1 = dup2(r0, r0)
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
pidfd_getfd(r3, r2, 0x0)
dup2(r1, r2)
r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r4, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0xc0085504, 0x20000000)

[ 1598.414862] udc-core: couldn't find an available UDC or it's busy
[ 1598.415575] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1598.424886] FAULT_INJECTION: forcing a failure.
[ 1598.424886] name failslab, interval 1, probability 0, space 0, times 0
[ 1598.426375] CPU: 1 PID: 10436 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1598.427071] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1598.427904] Call Trace:
[ 1598.428188]  dump_stack+0x107/0x167
[ 1598.428566]  should_fail.cold+0x5/0xa
[ 1598.428960]  ? create_object.isra.0+0x3a/0xa20
[ 1598.429431]  should_failslab+0x5/0x20
[ 1598.429823]  kmem_cache_alloc+0x5b/0x310
[ 1598.430244]  create_object.isra.0+0x3a/0xa20
[ 1598.430697]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1598.431216]  __kmalloc+0x16e/0x390
[ 1598.431596]  io_setup_async_rw+0x180/0x580
[ 1598.432046]  io_read+0xe98/0x11e0
[ 1598.432411]  ? __is_insn_slot_addr+0x14c/0x290
[ 1598.432889]  ? kiocb_done+0xc90/0xc90
[ 1598.433299]  ? __lock_acquire+0xbb1/0x5b00
[ 1598.433761]  ? __lock_acquire+0xbb1/0x5b00
[ 1598.434215]  io_issue_sqe+0x2e12/0x7660
[ 1598.434651]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1598.435217]  ? SOFTIRQ_verbose+0x10/0x10
[ 1598.435653]  ? __io_arm_poll_handler+0x59b/0x9e0
[ 1598.436173]  ? lock_downgrade+0x6d0/0x6d0
[ 1598.436620]  ? io_connect+0x610/0x610
[ 1598.437037]  ? lock_acquire+0x197/0x470
[ 1598.437464]  ? find_held_lock+0x2c/0x110
[ 1598.437910]  ? __fget_files+0x26d/0x4c0
[ 1598.438341]  ? lock_downgrade+0x6d0/0x6d0
[ 1598.438798]  __io_queue_sqe+0x90/0x9d0
[ 1598.439221]  ? io_issue_sqe+0x7660/0x7660
[ 1598.439670]  ? io_prep_rw+0x7f5/0x1050
[ 1598.440097]  io_submit_sqes+0x4461/0x85c0
[ 1598.440562]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1598.441095]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1598.441613]  ? lock_downgrade+0x6d0/0x6d0
[ 1598.442061]  ? find_held_lock+0x2c/0x110
[ 1598.442508]  ? io_submit_sqes+0x85c0/0x85c0
[ 1598.442979]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1598.443504]  ? wait_for_completion_io+0x270/0x270
[ 1598.444043]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1598.444540]  ? vfs_write+0x354/0xa70
[ 1598.444949]  ? fput_many+0x2f/0x1a0
[ 1598.445347]  ? ksys_write+0x1a9/0x260
[ 1598.445759]  ? __ia32_sys_read+0xb0/0xb0
[ 1598.446208]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1598.446785]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1598.447353]  do_syscall_64+0x33/0x40
[ 1598.447755]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1598.448307] RIP: 0033:0x7fa6f6a9fb19
[ 1598.448712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1598.450659] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1598.451469] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1598.452254] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1598.453021] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1598.453780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1598.454547] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
07:14:58 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000)

[ 1598.479519] udc-core: couldn't find an available UDC or it's busy
[ 1598.481216] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1598.510672] udc-core: couldn't find an available UDC or it's busy
[ 1598.512022] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:14:58 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x600000)

07:14:59 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:14:59 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28)

07:14:59 executing program 2:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r0}, 0x0)
close(r0)
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r3=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:14:59 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
pidfd_getfd(r4, r3, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/219, 0xdb}], 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
ioctl$SNAPSHOT_S2RAM(r2, 0x330b)
r5 = dup2(r0, r0)
r6 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r6, 0x0)
ioctl$HIDIOCINITREPORT(r5, 0xc0085504, 0x20000000)

[ 1599.218032] FAULT_INJECTION: forcing a failure.
[ 1599.218032] name failslab, interval 1, probability 0, space 0, times 0
[ 1599.219263] CPU: 1 PID: 10467 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1599.219972] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1599.220806] Call Trace:
[ 1599.221089]  dump_stack+0x107/0x167
[ 1599.221467]  should_fail.cold+0x5/0xa
[ 1599.221862]  ? __io_queue_sqe+0x666/0x9d0
[ 1599.222286]  should_failslab+0x5/0x20
[ 1599.222677]  kmem_cache_alloc_trace+0x55/0x320
[ 1599.223139]  __io_queue_sqe+0x666/0x9d0
[ 1599.223547]  ? io_issue_sqe+0x7660/0x7660
[ 1599.223986]  ? io_prep_rw+0x7f5/0x1050
[ 1599.224392]  io_submit_sqes+0x4461/0x85c0
[ 1599.224830]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1599.225334]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1599.225830]  ? lock_downgrade+0x6d0/0x6d0
[ 1599.226249]  ? find_held_lock+0x2c/0x110
[ 1599.226670]  ? io_submit_sqes+0x85c0/0x85c0
[ 1599.227115]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1599.227612]  ? wait_for_completion_io+0x270/0x270
[ 1599.228120]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1599.228601]  ? vfs_write+0x354/0xa70
[ 1599.229010]  ? fput_many+0x2f/0x1a0
[ 1599.229408]  ? ksys_write+0x1a9/0x260
[ 1599.229825]  ? __ia32_sys_read+0xb0/0xb0
[ 1599.230265]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1599.230836]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1599.231403]  do_syscall_64+0x33/0x40
[ 1599.231824]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1599.232351] RIP: 0033:0x7fa6f6a9fb19
[ 1599.232743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1599.234682] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1599.235481] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1599.236241] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1599.237006] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1599.237762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1599.238538] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
[ 1599.304964] udc-core: couldn't find an available UDC or it's busy
[ 1599.305798] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:15:13 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0)
ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x80085502, 0x20000000)

07:15:13 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000)

07:15:13 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29)

07:15:13 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0)

07:15:13 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x4010, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x9, 0x0, 0x0, 0x80, 0x0, 0x5e, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x4}, 0x5900, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffefffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:15:13 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:15:13 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:15:13 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0xc0085504, 0x20000000)
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0)
syz_io_uring_setup(0x7bf4, &(0x7f00000001c0)={0x0, 0x319, 0x8, 0x2, 0x32c}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000240)=<r6=>0x0)
r7 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3df}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000380), &(0x7f0000002a40))
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8)
syz_io_uring_submit(0x0, r6, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x4, 0x2004, @fd_index, 0x400000000000, &(0x7f0000000280)="a871b3c099be2bc32b14c91bd8c17184e2b9386d1941463187616d05e4e9b9d4bc2b8559c00bc5d11bee229342d9f7a298b47249e40e4be6a5e3c516b28f0b1e3c8d9710b52a8526397857ff26861a3b65f22422ebac9e6fe6422c7a4b05f8be0adbc05200df46d72cdb5ce53567ce84eb240a235d40f7e92c195f0cf9c91bb4a6c23bc7104bcc2ccbac8e508223926c340fc32ed0cc7726818efe81e49155be1811b2440d9414f534b18a15db17589fb3b7a2c2d3", 0xb5, 0x0, 0x0, {0x0, r8}}, 0xa99)
r9 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000002a40))
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0xa, 0x0, r10)
syz_io_uring_submit(0x0, r6, &(0x7f0000000600)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x9, 0x0, 0x9, 0x0, 0x0, {0x0, r10}}, 0x7)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r5, 0x0, &(0x7f0000000080)="47cd122d3f4bed3648b6f3ba86ac8e56c414ec0bcbd60336a813a35f6748e5ced225683c13d4f8089dc721f037f33769ee52028f521ebbd6fdc5c72adc91cbe9352d31d6d5feeda51319176feb9c890d354d62a8768f65322e473ed3c6c327bf817c9602adc6a56a8bd093a132ba29cc9709d6c9d523c412e5c2c9f63b8c54e9ef4148487a29c400149d1957f802c2344c47c1106c58cbc4daea2a0f96fbce9b2b572c529031c7bc2daf02b0609213483cd9c4", 0xb3, 0x20000000, 0x1, {0x0, r10}}, 0x1ff)

[ 1612.931044] udc-core: couldn't find an available UDC or it's busy
[ 1612.932457] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1612.957660] udc-core: couldn't find an available UDC or it's busy
[ 1612.959075] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1613.009474] FAULT_INJECTION: forcing a failure.
[ 1613.009474] name failslab, interval 1, probability 0, space 0, times 0
[ 1613.012152] CPU: 1 PID: 10494 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1613.013576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1613.015312] Call Trace:
[ 1613.015910]  dump_stack+0x107/0x167
[ 1613.016693]  should_fail.cold+0x5/0xa
[ 1613.017503]  ? create_object.isra.0+0x3a/0xa20
[ 1613.018467]  should_failslab+0x5/0x20
[ 1613.019278]  kmem_cache_alloc+0x5b/0x310
[ 1613.020144]  create_object.isra.0+0x3a/0xa20
[ 1613.021071]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1613.022137]  kmem_cache_alloc_trace+0x151/0x320
[ 1613.023120]  __io_queue_sqe+0x666/0x9d0
[ 1613.023971]  ? io_issue_sqe+0x7660/0x7660
[ 1613.024855]  ? io_prep_rw+0x7f5/0x1050
[ 1613.025681]  io_submit_sqes+0x4461/0x85c0
[ 1613.026594]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1613.027634]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1613.028667]  ? lock_downgrade+0x6d0/0x6d0
[ 1613.029538]  ? find_held_lock+0x2c/0x110
[ 1613.030402]  ? io_submit_sqes+0x85c0/0x85c0
[ 1613.031318]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1613.032345]  ? wait_for_completion_io+0x270/0x270
[ 1613.033358]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1613.034333]  ? vfs_write+0x354/0xa70
[ 1613.035124]  ? fput_many+0x2f/0x1a0
[ 1613.035915]  ? ksys_write+0x1a9/0x260
[ 1613.036720]  ? __ia32_sys_read+0xb0/0xb0
[ 1613.037588]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1613.038688]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1613.039777]  do_syscall_64+0x33/0x40
[ 1613.040582]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1613.041662] RIP: 0033:0x7fa6f6a9fb19
[ 1613.042447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1613.046305] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1613.047913] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1613.049395] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1613.050878] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1613.052387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1613.053877] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
07:15:13 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x9}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0)
ioctl$sock_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000080))
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:15:13 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:15:28 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:15:28 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0)
ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x80085502, 0x20000000)

07:15:28 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000c00)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x4d8, 0xf002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x10, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x20, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x987}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xf1, 0x1f}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x0, 0x80, 0x2d}}]}}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x110, 0x4, 0x6, 0x9, 0x8, 0x6}, 0xc, &(0x7f0000000e80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0x3, 0x9423}]}, 0x5, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x414}}, {0xf4, &(0x7f0000000f00)=@string={0xf4, 0x3, "0a7584d747d98ef551f3e94f02bfeb596a8e6b875e88460489cdd845b857df8f6cef36834e2d4bc0349287733625886eb501fc139787abe60708c9bec0fbd5da7466f9d563e847195996f1d828c27bba45eca3b6f8a17dc6f58259f36acf7e6f57270ace0a064bfff4518a04f6a368d6cf12a8ca5c54a11bcaf1b7224c963df96400cd72c365bcd2a9dc03b8b2df2308bc7e581a33ca59c38e63d1936a25cec80a9426946a8f84b9c152c0fc61aa406b28a8e9f07fcd3f853af7d6c21600c15b5f82f491ee69048dc5d4957a9b5b802bbd04122c673cc5e639854d51b3243ee4313787afec0ee4ecf7dce9cf2a526e9af7b4"}}, {0x6c, &(0x7f0000001000)=@string={0x6c, 0x3, "be25352ce1858df45511386f3bd6a7a70b7941ddf6d66c4401c4e195b55562e5ab135a4c8ded5a35bec8a9b46c37b39b6b4b8106f81602461ced766d44ce58477f4951ed1ccab882acebe51d4d6a14df33b4b7eedd540e79e9e4aceae662730140bcbcc916bce99de7c9"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x449}}]})
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x78, &(0x7f0000000b80)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0xd7, 0x80, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "b1d2b9"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x1, 0x1000, 0x40}, {0x6, 0x24, 0x1a, 0x9, 0x20}, [@network_terminal={0x7, 0x24, 0xa, 0x5, 0x3, 0x80, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x80, 0x1, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x7f7, 0x4, 0x1, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3, 0x6}}}}}}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x7, 0x8, 0x9, 0x20, 0x8}, 0x3d, &(0x7f0000000dc0)=ANY=[@ANYBLOB="050f3d0002141004010dbae4512380dd8b74727ba2caa9c0b824100a072601000000000500c000000000c00000003f0000303f000000c0ff00003fff001b50577d5788cdafe514964d7e140a3783ec8c0f19f8a3623324e3c1da6c0e05308b1452a6dc38067a724b5c1173f5a737a6e6429dd3d8618506b63e69b9"], 0x5, [{0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x820}}, {0x0, 0xffffffffffffffff}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x422}}, {0x39, &(0x7f0000000d00)=@string={0x39, 0x3, "04f385eea1bd44728756d9aed620307d1a0b1d1e0859a49d5775d26e3e2500af54122447f73820d04aee3c5d097e0d4a091a34881d5a94"}}]})
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0xc0085504, 0x20000000)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
write$binfmt_elf32(r3, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x0, 0xa2, 0xfc, 0x101, 0x0, 0x6, 0x4, 0x356, 0x38, 0x17f, 0x81, 0x7, 0x20, 0x2, 0x3ff, 0x8, 0x6}, [{0x3, 0x9181, 0x3, 0x7, 0x8, 0x4, 0x1ff, 0x38}], "1697c5640f5ab96413d8dc743e61e8aacdc53bd17f76c63b7353e21b73451405d42a589efa9196cfd989994e84f194a92a4bde8b67ae7441269d4613879a1aae8182ab1d9522f2ef4a7baf02b0bc6a828655d307b3f31a3212a958af69920cf0f5d8cf7c96ab652d3d3f34e69c42b6a375c51e6f8667ea", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xacf)

07:15:28 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30)

07:15:28 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80ffff)

07:15:28 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4, 0x4010, r0, 0x0)
r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0)
r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0)
syz_io_uring_submit(r9, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
syz_io_uring_submit(r4, r7, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd_index=0xa, 0xd29, 0x0, 0x3, 0x2}, 0x4b54)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r10 = getpgrp(0x0)
pidfd_open(r10, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r11=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r11, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:15:28 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0)

07:15:28 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0)
syz_io_uring_submit(r8, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r3}, 0x0)
r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r10=>0x0}, 0x0)
io_uring_enter(r0, 0x1cd8, 0xef46, 0x0, &(0x7f00000000c0)={[0x400]}, 0x8)
io_uring_enter(r10, 0xcd8, 0x1f04, 0x2, &(0x7f0000000180)={[0xbbc7]}, 0x8)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x1014}}, 0x8001)
syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1628.153698] udc-core: couldn't find an available UDC or it's busy
[ 1628.155221] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1628.161833] udc-core: couldn't find an available UDC or it's busy
[ 1628.163458] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1628.171714] udc-core: couldn't find an available UDC or it's busy
[ 1628.173428] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1628.181917] FAULT_INJECTION: forcing a failure.
[ 1628.181917] name failslab, interval 1, probability 0, space 0, times 0
[ 1628.184808] CPU: 0 PID: 10536 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1628.186473] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1628.188499] Call Trace:
[ 1628.189098]  dump_stack+0x107/0x167
[ 1628.190019]  should_fail.cold+0x5/0xa
[ 1628.190990]  ? io_setup_async_rw+0x180/0x580
[ 1628.192039]  should_failslab+0x5/0x20
[ 1628.192923]  __kmalloc+0x72/0x390
[ 1628.193789]  ? mark_lock+0xf5/0x2df0
[ 1628.194712]  io_setup_async_rw+0x180/0x580
[ 1628.195828]  io_read+0xe98/0x11e0
[ 1628.196675]  ? __is_insn_slot_addr+0x14c/0x290
[ 1628.197806]  ? kiocb_done+0xc90/0xc90
[ 1628.198789]  ? __lock_acquire+0xbb1/0x5b00
[ 1628.199714]  ? __lock_acquire+0xbb1/0x5b00
[ 1628.200609]  io_issue_sqe+0x2e12/0x7660
[ 1628.201448]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1628.202548]  ? SOFTIRQ_verbose+0x10/0x10
[ 1628.203391]  ? __io_arm_poll_handler+0x59b/0x9e0
[ 1628.204405]  ? lock_downgrade+0x6d0/0x6d0
[ 1628.205273]  ? io_connect+0x610/0x610
[ 1628.206075]  ? lock_acquire+0x197/0x470
[ 1628.206905]  ? find_held_lock+0x2c/0x110
[ 1628.207764]  ? __fget_files+0x26d/0x4c0
[ 1628.208608]  ? lock_downgrade+0x6d0/0x6d0
[ 1628.209482]  __io_queue_sqe+0x90/0x9d0
[ 1628.210308]  ? io_issue_sqe+0x7660/0x7660
[ 1628.211181]  ? io_prep_rw+0x7f5/0x1050
[ 1628.212004]  io_submit_sqes+0x4461/0x85c0
[ 1628.212923]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1628.213966]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1628.214978]  ? lock_downgrade+0x6d0/0x6d0
[ 1628.215846]  ? find_held_lock+0x2c/0x110
[ 1628.216711]  ? io_submit_sqes+0x85c0/0x85c0
[ 1628.217621]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1628.218628]  ? wait_for_completion_io+0x270/0x270
[ 1628.219640]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1628.220620]  ? vfs_write+0x354/0xa70
[ 1628.221401]  ? fput_many+0x2f/0x1a0
[ 1628.222166]  ? ksys_write+0x1a9/0x260
[ 1628.222961]  ? __ia32_sys_read+0xb0/0xb0
[ 1628.223814]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1628.224927]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1628.226006]  do_syscall_64+0x33/0x40
[ 1628.226787]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1628.227855] RIP: 0033:0x7fa6f6a9fb19
[ 1628.228638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1628.232595] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1628.234230] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1628.235748] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1628.237380] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1628.238896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1628.240436] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
07:15:28 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0)
close(r4)
r5 = getpgrp(0x0)
pidfd_open(r5, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r7=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x111000)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x9, 0x1, 0x2, 0x8, 0x0, 0x5, 0xe004, 0xa, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000080), 0x2}, 0x302, 0x7, 0x1, 0x9, 0x1000, 0x80, 0x8, 0x0, 0x100, 0x0, 0x8}, 0xffffffffffffffff, 0x4, r8, 0x9)

07:15:28 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
r5 = pidfd_open(r4, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r7=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
r9 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0)
getresuid(&(0x7f0000000200), &(0x7f0000000240)=<r10=>0x0, &(0x7f0000000280))
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@cache_mmap}, {@msize={'msize', 0x3d, 0xfffffffffffffffe}}, {@cache_none}, {@uname={'uname', 0x3d, '&/,\xe5/(^\xf3\xee-,'}}, {@access_any}, {@fscache}], [{@euid_eq={'euid', 0x3d, r10}}, {@obj_role={'obj_role', 0x3d, 'wlan1\x00'}}]}})
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r10}}, {@posixacl}, {@cache_none}, {@debug={'debug', 0x3d, 0xffffffffffffffc1}}], [{@context={'context', 0x3d, 'root'}}]}})

07:15:28 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0)
r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0)
syz_io_uring_submit(r9, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r10 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r11=>0x0, &(0x7f0000000140)=<r12=>0x0)
r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r13, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0)
r14 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r10, 0x0)
syz_io_uring_submit(r14, r12, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
syz_io_uring_submit(r9, r12, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x40000, 0x0, 0x1c}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x9)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:15:28 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc0ffff)

07:15:29 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0)
ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x80085502, 0x20000000)

07:15:29 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31)

07:15:29 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000440)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_complete(r1)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/11, 0xb}], 0x1, &(0x7f0000000340)=""/136, 0x88}, 0x0, 0x2, 0x1, {0x2}}, 0x6)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x41030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xfffffffffffffff7}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x800)
write$P9_RREADLINK(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="1000000017020007e82b8e1669806530"], 0x10)
r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
pidfd_getfd(r7, r5, 0x0)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000280)={0x8, 0x8000, 0xb3f4, 0x800, 0x101})
fcntl$setpipe(r7, 0x407, 0x7f)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:15:29 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r2 = pidfd_open(0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
pidfd_getfd(r4, r3, 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
pidfd_getfd(r6, r5, 0x0)
r7 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r7, 0x0)
r8 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x101)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x7, 0x0, &(0x7f0000000000)=[r2, r4, r6, r7, r1, r1, r8]}, 0x7)
r9 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r9, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0xc0085504, 0x20000000)

[ 1629.017677] FAULT_INJECTION: forcing a failure.
[ 1629.017677] name failslab, interval 1, probability 0, space 0, times 0
[ 1629.020317] CPU: 0 PID: 10571 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1629.021809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1629.023607] Call Trace:
[ 1629.024212]  dump_stack+0x107/0x167
[ 1629.025027]  should_fail.cold+0x5/0xa
[ 1629.025868]  ? create_object.isra.0+0x3a/0xa20
[ 1629.026870]  should_failslab+0x5/0x20
[ 1629.027702]  kmem_cache_alloc+0x5b/0x310
[ 1629.028626]  create_object.isra.0+0x3a/0xa20
[ 1629.029610]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1629.030725]  __kmalloc+0x16e/0x390
[ 1629.031525]  io_setup_async_rw+0x180/0x580
[ 1629.032474]  io_read+0xe98/0x11e0
[ 1629.033247]  ? __is_insn_slot_addr+0x14c/0x290
[ 1629.034256]  ? kiocb_done+0xc90/0xc90
[ 1629.035109]  ? __lock_acquire+0xbb1/0x5b00
[ 1629.036102]  ? __lock_acquire+0xbb1/0x5b00
[ 1629.037041]  io_issue_sqe+0x2e12/0x7660
[ 1629.037925]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1629.039070]  ? SOFTIRQ_verbose+0x10/0x10
[ 1629.039958]  ? __io_arm_poll_handler+0x59b/0x9e0
[ 1629.040998]  ? lock_downgrade+0x6d0/0x6d0
[ 1629.041896]  ? io_connect+0x610/0x610
[ 1629.042740]  ? lock_acquire+0x197/0x470
[ 1629.043612]  ? find_held_lock+0x2c/0x110
[ 1629.044525]  ? __fget_files+0x26d/0x4c0
[ 1629.045408]  ? lock_downgrade+0x6d0/0x6d0
[ 1629.046340]  __io_queue_sqe+0x90/0x9d0
[ 1629.047210]  ? io_issue_sqe+0x7660/0x7660
[ 1629.048147]  ? io_prep_rw+0x7f5/0x1050
[ 1629.049019]  io_submit_sqes+0x4461/0x85c0
[ 1629.049993]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1629.051103]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1629.052193]  ? lock_downgrade+0x6d0/0x6d0
[ 1629.053113]  ? find_held_lock+0x2c/0x110
[ 1629.054033]  ? io_submit_sqes+0x85c0/0x85c0
[ 1629.055011]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1629.056112]  ? wait_for_completion_io+0x270/0x270
[ 1629.057203]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1629.058215]  ? vfs_write+0x354/0xa70
[ 1629.059036]  ? fput_many+0x2f/0x1a0
[ 1629.059840]  ? ksys_write+0x1a9/0x260
[ 1629.060697]  ? __ia32_sys_read+0xb0/0xb0
[ 1629.061626]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1629.062804]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1629.063956]  do_syscall_64+0x33/0x40
[ 1629.064797]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1629.065901] RIP: 0033:0x7fa6f6a9fb19
[ 1629.066738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1629.070771] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1629.072444] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1629.073978] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1629.075513] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1629.077063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1629.078615] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
[ 1629.090440] udc-core: couldn't find an available UDC or it's busy
[ 1629.091183] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1629.118893] udc-core: couldn't find an available UDC or it's busy
[ 1629.120393] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:15:44 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:15:44 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0)

07:15:44 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
r5 = pidfd_open(r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r6=>r5}, './file0\x00'})
io_uring_enter(r6, 0x13ed, 0x6ba5, 0x0, &(0x7f00000000c0)={[0x20]}, 0x8)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r8=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:15:44 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=<r1=>0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
pidfd_getfd(r4, r3, 0x0)
vmsplice(r4, &(0x7f0000000080)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="73ec78b8063c3795cd75197902333a88f30567b48f1f8e27b926fa05dfbf498d575a81a3767e45e68f6fd9322f5bc6ec04842b5d7a32152eb1f3269a22f0695fcb73f76c8fbf97d1b9910129f9decd2f9c6630cb23fd2864fbd06c6fce39256a50e9995a346860ab4b299931437ecaa35c991a4479ce6df7799ac6da82575170ef03eac475019aef50941f27ca9d84184f0701db658226d69e739ae6416f5a6c6773093d3ae56141bb577febefb1947bba016fd1785cc0663b9cb076f13047037935c400374318961a73", 0xca}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000002e00)="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", 0x1000}, {&(0x7f0000001440)="22527c3ecb0298ebd0025803c67ac219276de28accd630cd1b42ac2545e98d5f2e77ff412d1b07342a8542f1a7d9232b6a88912c67d369d4dbffd88e10123231df20f0a2a08e9c3e29409e3063986406f6058df4f550b5fa28792852b3b58b5f0bc3a9d42d2c664453a3383c92d7ebec4898625989cc30a4f6e819eaa127035f8f473fc18c5bfb12849e55c52ac8d5cacb772e27b0bfe51ee83aae7ea11871f5a2d8f2f11379b22edf9e84879881fb638376fcb8", 0xb4}, {&(0x7f0000001500)="92255f1d315ae7e1cae48441bb265a3259b3c12dc073d55338f80ae1e1d91a169cd359ff8998113946f095aa0a583f0d88e61f69b345f119c66b9a98979e007a3d796ced6419bcd8bc630018487340a36e4ad4c8209dabfe9f1e1ead53d2e0f3b238ae851adbfc3c1e3d003673b0ca53fdc5aa77abc9cd61a7480c425ca8cdeb62731a2d9a45c1e87b17700908d0eaced1e5df318900faa3c1c486923d5eec1f5c17682d8aca81e43aa4060edf2ab4", 0xaf}, {&(0x7f00000015c0)="98871c3be90a6485328e56ad41c3035521b20d6b9dc6ec21831e599a5230d4452ca1474b84a4048d5292790c4ef4befed6d87e0385f07bfd96d36ebde7b99ffd4ba1c8fe6eabe08bd8a4926aebbf41ec363bb53ca20c43a1a58973b797f3d2b66d462612ca4da16efd475b7c696ac21c71e529d00695d6d920227e6d23bd603c73", 0x81}], 0x7, 0x9)

07:15:44 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32)

07:15:44 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x80085502, 0x20000000)

07:15:44 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000)

07:15:44 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000001c0)={0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "46da080096fe92"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004ff40)={0x0, ""/256, 0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, <r7=>0x0, <r8=>0x0})
[ 1644.501960] FAULT_INJECTION: forcing a failure.
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={<r9=>0x0, <r10=>0x0, "c009b39830e4109622d7a29d0bd42e6d365c8384f665a2104b6faaa5427626b93311e77f0de4211e1217bc355a5246327eb7ba126bf7e4adb45535a4d9757c77f555e42c9254e9f9089be590271f821f5f6b632da2dabf1d6e618629da57a34a33f5e913338e628f32d84f60dbb9f94b70f1828e7d652bb2443c02901738d15cd72d14288f0d47dfe96e49988d0402f96628f97be361723e018daf71ab695fa4726664c00ec9aa53b8c092760da4cd088f03fad6504eceb8949dc35abc6c9f51916777bc38aa3669fb220546dbd1024eb87da205b46ec35180a8fcb898160855b5044023da75f2b1f285c1462a8afa95492a14be3f42052ff535612d226506a0", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={<r11=>0x0, ""/256, <r12=>0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {<r14=>0x0}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {r10}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {<r15=>0x0}, {}, {0x0, <r16=>0x0}, {}, {}, {}, {0x0, <r17=>0x0}, {}, {}, {0x0, <r18=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {<r19=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r20=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r21=>0x0}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r22=>0x0}, {}, {}, {}, {}, {}, {}, {0x0, <r23=>0x0}, {}, {}, {}, {}, {0x0, <r24=>0x0}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x0, "46da080096fe92"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001e00)={<r25=>r23, r22, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000063800)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r19}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r25}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r21}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x2, "7c1793b29af822"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000003100)={{<r26=>r20, 0xff6, 0xfffffffffffffffe, 0x8, 0x7, 0x9, 0x5, 0x0, 0x8, 0x0, 0x8, 0x2, 0x8, 0x0, 0x2}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000050140)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r26}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r6}, {r7}], 0x7f, "145f08fa0576f0"})
[ 1644.501960] name failslab, interval 1, probability 0, space 0, times 0
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000080)={r6, 0x0, "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", "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"})
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0xc0085504, 0x20000000)

[ 1644.503689] CPU: 1 PID: 10591 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1644.504571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1644.505539] Call Trace:
[ 1644.505845]  dump_stack+0x107/0x167
[ 1644.506266]  should_fail.cold+0x5/0xa
[ 1644.506685]  ? __io_queue_sqe+0x666/0x9d0
[ 1644.507160]  should_failslab+0x5/0x20
[ 1644.507585]  kmem_cache_alloc_trace+0x55/0x320
[ 1644.508104]  __io_queue_sqe+0x666/0x9d0
[ 1644.508556]  ? io_issue_sqe+0x7660/0x7660
[ 1644.509033]  ? io_prep_rw+0x7f5/0x1050
[ 1644.509466]  io_submit_sqes+0x4461/0x85c0
[ 1644.509962]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1644.510512]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1644.511066]  ? lock_downgrade+0x6d0/0x6d0
[ 1644.511527]  ? find_held_lock+0x2c/0x110
[ 1644.512001]  ? io_submit_sqes+0x85c0/0x85c0
[ 1644.512509]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1644.513049]  ? wait_for_completion_io+0x270/0x270
[ 1644.513603]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1644.514136]  ? vfs_write+0x354/0xa70
[ 1644.514565]  ? fput_many+0x2f/0x1a0
[ 1644.514986]  ? ksys_write+0x1a9/0x260
[ 1644.515426]  ? __ia32_sys_read+0xb0/0xb0
[ 1644.515896]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1644.516507]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1644.517094]  do_syscall_64+0x33/0x40
[ 1644.517529]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1644.518100] RIP: 0033:0x7fa6f6a9fb19
[ 1644.518533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1644.520597] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1644.521458] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1644.522264] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1644.523070] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1644.523879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1644.524693] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
[ 1644.610382] udc-core: couldn't find an available UDC or it's busy
[ 1644.611172] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:15:44 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x80085502, 0x20000000)

07:15:44 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0)

07:15:45 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:15:45 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0)

07:15:45 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x80085502, 0x20000000)

07:15:45 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0)

07:15:45 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33)

07:15:45 executing program 2:
r0 = io_uring_setup(0x6921, &(0x7f0000000240)={0x0, 0x6f5a, 0x4, 0x1, 0x273})
r1 = syz_io_uring_setup(0x79bc, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x705202, 0x0)
syz_open_dev$evdev(&(0x7f0000000080), 0x8001, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000005, 0x13, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r5, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index=0x2}, 0x1)
close(r4)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r6)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x9, 0x0, 0x9, 0x0, 0x0, {0x0, r6}}, 0x7)
syz_io_uring_submit(r2, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0xcf1)
r7 = getpgrp(0x0)
pidfd_open(r7, 0x0)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r9=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, 0x0)
openat(r9, &(0x7f00000000c0)='./file0\x00', 0xed775deb37f19cc3, 0x1a3)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r8, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r1, 0x1609, 0x0, 0x0, 0x0, 0x0)

[ 1645.011134] FAULT_INJECTION: forcing a failure.
[ 1645.011134] name failslab, interval 1, probability 0, space 0, times 0
[ 1645.012615] CPU: 1 PID: 10630 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1645.013388] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1645.014276] Call Trace:
[ 1645.014577]  dump_stack+0x107/0x167
[ 1645.014988]  should_fail.cold+0x5/0xa
[ 1645.015415]  ? create_object.isra.0+0x3a/0xa20
[ 1645.015918]  should_failslab+0x5/0x20
[ 1645.016377]  kmem_cache_alloc+0x5b/0x310
[ 1645.016830]  create_object.isra.0+0x3a/0xa20
[ 1645.017315]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1645.017883]  kmem_cache_alloc_trace+0x151/0x320
[ 1645.018428]  __io_queue_sqe+0x666/0x9d0
[ 1645.018880]  ? io_issue_sqe+0x7660/0x7660
[ 1645.019327]  ? io_prep_rw+0x7f5/0x1050
[ 1645.019745]  io_submit_sqes+0x4461/0x85c0
[ 1645.020197]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1645.020728]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1645.021237]  ? lock_downgrade+0x6d0/0x6d0
[ 1645.021670]  ? find_held_lock+0x2c/0x110
[ 1645.022109]  ? io_submit_sqes+0x85c0/0x85c0
[ 1645.022574]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1645.023091]  ? wait_for_completion_io+0x270/0x270
[ 1645.023607]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1645.024098]  ? vfs_write+0x354/0xa70
[ 1645.024519]  ? fput_many+0x2f/0x1a0
[ 1645.024906]  ? ksys_write+0x1a9/0x260
[ 1645.025314]  ? __ia32_sys_read+0xb0/0xb0
[ 1645.025753]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1645.026318]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1645.026890]  do_syscall_64+0x33/0x40
[ 1645.027290]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1645.027837] RIP: 0033:0x7fa6f6a9fb19
[ 1645.028237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1645.030205] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1645.031013] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1645.031780] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1645.032557] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1645.033315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1645.034078] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
[ 1645.251760] udc-core: couldn't find an available UDC or it's busy
[ 1645.253197] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1645.535024] udc-core: couldn't find an available UDC or it's busy
[ 1645.535796] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:15:45 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:15:45 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x80085502, 0x20000000)

07:15:45 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
r7 = getpgrp(r4)
setpriority(0x1, r7, 0x1000)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xff, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {<r8=>r0}}, './file0\x00'})
sendmmsg$inet6(r8, &(0x7f00000006c0)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000380)="b3c483597263d47258d864a94a9274495b627a0c5be89e4d96cc0c8b08fb28cb20c194ad21b31e5ab0994bf3f3fe1bc3171ad8f91edd4a1e33", 0x39}, {&(0x7f00000003c0)="d2ceba4d6eb3a97252da9c150fcc5a79cbf7cab5f6bd04aa45dd718a5600387a37a64aeec67dc95c0bf5f384a1e781bfba5bcc51919de99c37273aca2bee7598a8acf6b85a68f3a187c8f8a0729ad354a708a6a5f7", 0x55}, {&(0x7f0000000440)="13b94e8fab018f36e01e904c1176323b1b9eabf8d8fcf0058dc691ef8ba13df15cb944ed172973bb3311a8a88da0a60f59fa13be6d5fdfc48c5b745d392ab377c68b1b3e71f4f00a558279d5a8157a715f615230e653d43d0fa1944ea44f60fcd5a42b7c6410d9de114f4b061ae662d8d3ccaf80a55bd979c4011226e9", 0x7d}, {&(0x7f00000004c0)="aa6fdf84e209148a2c0ac242b75d5f91474fcc1545a59880ba6edc35553c91e8e277edd8c816a1ecbd704fa79abb2f56b5106581b3014c0f025d45e46cb6d134660451f525584e70e3f3c7a4baee7f26803d8b9d54e26430124d92159d7e561b5f686010f0fa4a73345b58b7391a284b99a14cf0fec52c3d8e1193772ff9c15a5302c1b5db3d61e6a092bbd2701c3626fadeb3dcb3be5622a35fe07bf1f9b96033c0dbde27a90e46007c89bc3690398d4b025e5afd8cce015f1291729845684cecf82112ac05e4415940ea52de8509c3364f0d9007e095d4730b02d0ea555dde8dddde6f47949bf9457518dbd3c9", 0xee}], 0x4, &(0x7f0000000600)=[@hopopts={{0x28, 0x29, 0x36, {0xb4, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x8}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8000}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x8c115e9983d01a85, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}], 0x90}}], 0x1, 0x4000800)
r9 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d)
sendmsg$nl_generic(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)={0x14, 0x42, 0x69844ea0a6ddcd11}, 0x14}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r9, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, 0x3, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x200}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1ff}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x635}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x98}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x5}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa39}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x75b}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x2000010)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:15:45 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x2002, 0x2, 0x10}, 0x18)
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x50442, 0x0)
recvfrom$inet6(r2, &(0x7f0000000140)=""/108, 0x6c, 0x40010120, &(0x7f00000001c0)={0xa, 0x4e20, 0x100, @ipv4={'\x00', '\xff\xff', @local}, 0x7ff}, 0x1c)
ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000000c0)={'gretap0\x00', {0x2, 0x0, @multicast1}})
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r3 = dup2(r0, r0)
r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r4, 0x0)
ioctl$HIDIOCINITREPORT(r3, 0xc0085504, 0x20000000)

[ 1645.662384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=10652 comm=syz-executor.2
[ 1645.998158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=10652 comm=syz-executor.2
07:16:01 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:16:01 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffff8000)

07:16:01 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0xf, 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0xc0085504, 0x20000000)

07:16:01 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x80085502, 0x20000000)

07:16:01 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0)

07:16:01 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={<r6=>0x0, <r7=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r8=>r6, {0xee01, 0xffffffffffffffff}}, './file0\x00'})
readv(r8, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000180)=""/128, 0x80}], 0x2)

[ 1660.970440] udc-core: couldn't find an available UDC or it's busy
[ 1660.971913] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:16:01 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000180)={&(0x7f0000000080)=""/91, 0x5b})
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x200)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x3, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x4, 0x5}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x7bf4, &(0x7f00000001c0)={0x0, 0x319, 0x8, 0x2, 0x32c}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000240)=<r5=>0x0)
r6 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3df}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000380), &(0x7f0000002a40))
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7)
syz_io_uring_submit(0x0, r5, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x4, 0x2004, @fd_index, 0x400000000000, &(0x7f0000000280)="a871b3c099be2bc32b14c91bd8c17184e2b9386d1941463187616d05e4e9b9d4bc2b8559c00bc5d11bee229342d9f7a298b47249e40e4be6a5e3c516b28f0b1e3c8d9710b52a8526397857ff26861a3b65f22422ebac9e6fe6422c7a4b05f8be0adbc05200df46d72cdb5ce53567ce84eb240a235d40f7e92c195f0cf9c91bb4a6c23bc7104bcc2ccbac8e508223926c340fc32ed0cc7726818efe81e49155be1811b2440d9414f534b18a15db17589fb3b7a2c2d3", 0xb5, 0x0, 0x0, {0x0, r7}}, 0xa99)
r8 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000002a40))
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, r9)
syz_io_uring_submit(0x0, r5, &(0x7f0000000600)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x9, 0x0, 0x9, 0x0, 0x0, {0x0, r9}}, 0x7)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r9}}, 0x1)

07:16:01 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34)

[ 1661.006124] FAULT_INJECTION: forcing a failure.
[ 1661.006124] name failslab, interval 1, probability 0, space 0, times 0
[ 1661.007608] CPU: 1 PID: 10676 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1661.008370] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1661.009288] Call Trace:
[ 1661.009592]  dump_stack+0x107/0x167
[ 1661.009996]  should_fail.cold+0x5/0xa
[ 1661.010431]  ? io_setup_async_rw+0x180/0x580
[ 1661.010921]  should_failslab+0x5/0x20
[ 1661.011344]  __kmalloc+0x72/0x390
[ 1661.011727]  ? mark_lock+0xf5/0x2df0
[ 1661.012143]  io_setup_async_rw+0x180/0x580
[ 1661.012616]  io_read+0xe98/0x11e0
[ 1661.013015]  ? __is_insn_slot_addr+0x14c/0x290
[ 1661.013531]  ? kiocb_done+0xc90/0xc90
[ 1661.013959]  ? __lock_acquire+0xbb1/0x5b00
[ 1661.014440]  ? mark_lock+0xf5/0x2df0
[ 1661.014855]  ? __lock_acquire+0xbb1/0x5b00
[ 1661.015323]  io_issue_sqe+0x2e12/0x7660
[ 1661.015765]  ? lock_chain_count+0x20/0x20
[ 1661.016219]  ? __io_arm_poll_handler+0x59b/0x9e0
[ 1661.016744]  ? lock_downgrade+0x6d0/0x6d0
[ 1661.017194]  ? io_connect+0x610/0x610
[ 1661.017618]  ? lock_acquire+0x197/0x470
[ 1661.018051]  ? find_held_lock+0x2c/0x110
[ 1661.018509]  __io_queue_sqe+0x90/0x9d0
[ 1661.018943]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1661.019536]  ? trace_hardirqs_on+0x5b/0x180
[ 1661.020014]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1661.020645]  ? io_issue_sqe+0x7660/0x7660
[ 1661.021106]  ? io_submit_sqes+0x3b63/0x85c0
[ 1661.021597]  ? io_submit_sqes+0x2d4a/0x85c0
[ 1661.022073]  io_submit_sqes+0x4461/0x85c0
[ 1661.022568]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1661.023111]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1661.023663]  ? lock_downgrade+0x6d0/0x6d0
[ 1661.024119]  ? find_held_lock+0x2c/0x110
[ 1661.024583]  ? io_submit_sqes+0x85c0/0x85c0
[ 1661.025066]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1661.025616]  ? wait_for_completion_io+0x270/0x270
[ 1661.026169]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1661.026206] udc-core: couldn't find an available UDC or it's busy
[ 1661.026697]  ? vfs_write+0x354/0xa70
[ 1661.026718]  ? fput_many+0x2f/0x1a0
[ 1661.026747]  ? ksys_write+0x1a9/0x260
[ 1661.028119] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1661.028502]  ? __ia32_sys_read+0xb0/0xb0
[ 1661.030850]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1661.031447]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1661.032021]  do_syscall_64+0x33/0x40
[ 1661.032452]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1661.033025] RIP: 0033:0x7fa6f6a9fb19
[ 1661.033453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1661.035508] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1661.036369] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1661.037171] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1661.037972] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1661.038762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1661.039567] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
07:16:01 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x7bf4, &(0x7f00000001c0)={0x0, 0x319, 0x8, 0x2, 0x32c}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000240)=<r5=>0x0)
r6 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3df}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000380), &(0x7f0000002a40))
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7)
syz_io_uring_submit(0x0, r5, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x4, 0x2004, @fd_index, 0x400000000000, &(0x7f0000000280)="a871b3c099be2bc32b14c91bd8c17184e2b9386d1941463187616d05e4e9b9d4bc2b8559c00bc5d11bee229342d9f7a298b47249e40e4be6a5e3c516b28f0b1e3c8d9710b52a8526397857ff26861a3b65f22422ebac9e6fe6422c7a4b05f8be0adbc05200df46d72cdb5ce53567ce84eb240a235d40f7e92c195f0cf9c91bb4a6c23bc7104bcc2ccbac8e508223926c340fc32ed0cc7726818efe81e49155be1811b2440d9414f534b18a15db17589fb3b7a2c2d3", 0xb5, 0x0, 0x0, {0x0, r7}}, 0xa99)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r7}}, 0x800)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:16:01 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r7 = getpgrp(r4)
sched_getparam(r7, &(0x7f0000000080))

07:16:01 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffc000)

07:16:01 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35)

[ 1661.477944] FAULT_INJECTION: forcing a failure.
[ 1661.477944] name failslab, interval 1, probability 0, space 0, times 0
[ 1661.479255] CPU: 1 PID: 10703 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1661.480014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1661.480919] Call Trace:
[ 1661.481217]  dump_stack+0x107/0x167
[ 1661.481626]  should_fail.cold+0x5/0xa
[ 1661.482038]  ? create_object.isra.0+0x3a/0xa20
[ 1661.482560]  should_failslab+0x5/0x20
[ 1661.482993]  kmem_cache_alloc+0x5b/0x310
[ 1661.483436]  create_object.isra.0+0x3a/0xa20
[ 1661.483914]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1661.484463]  __kmalloc+0x16e/0x390
[ 1661.484885]  io_setup_async_rw+0x180/0x580
[ 1661.485345]  io_read+0xe98/0x11e0
[ 1661.485735]  ? __is_insn_slot_addr+0x14c/0x290
[ 1661.486239]  ? kiocb_done+0xc90/0xc90
[ 1661.486673]  ? __lock_acquire+0xbb1/0x5b00
[ 1661.487153]  ? __lock_acquire+0xbb1/0x5b00
[ 1661.487610]  io_issue_sqe+0x2e12/0x7660
[ 1661.488051]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1661.488638]  ? SOFTIRQ_verbose+0x10/0x10
[ 1661.489073]  ? __io_arm_poll_handler+0x59b/0x9e0
[ 1661.489577]  ? lock_downgrade+0x6d0/0x6d0
[ 1661.490030]  ? io_connect+0x610/0x610
[ 1661.490440]  ? lock_acquire+0x197/0x470
[ 1661.490869]  ? find_held_lock+0x2c/0x110
[ 1661.491312]  ? __fget_files+0x26d/0x4c0
[ 1661.491741]  ? lock_downgrade+0x6d0/0x6d0
[ 1661.492189]  __io_queue_sqe+0x90/0x9d0
[ 1661.492618]  ? io_issue_sqe+0x7660/0x7660
[ 1661.493065]  ? io_prep_rw+0x7f5/0x1050
[ 1661.493490]  io_submit_sqes+0x4461/0x85c0
[ 1661.493950]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1661.494489]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1661.495015]  ? lock_downgrade+0x6d0/0x6d0
[ 1661.495458]  ? find_held_lock+0x2c/0x110
[ 1661.495898]  ? io_submit_sqes+0x85c0/0x85c0
[ 1661.496374]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1661.496911]  ? wait_for_completion_io+0x270/0x270
[ 1661.497432]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1661.497927]  ? vfs_write+0x354/0xa70
[ 1661.498332]  ? fput_many+0x2f/0x1a0
[ 1661.498724]  ? ksys_write+0x1a9/0x260
[ 1661.499137]  ? __ia32_sys_read+0xb0/0xb0
[ 1661.499576]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1661.500150]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1661.500712]  do_syscall_64+0x33/0x40
[ 1661.501117]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1661.501672] RIP: 0033:0x7fa6f6a9fb19
[ 1661.502079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1661.504053] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1661.504881] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1661.505646] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1661.506410] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1661.507174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1661.507953] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
07:16:01 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:16:01 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x80085502, 0x20000000)

[ 1661.696356] udc-core: couldn't find an available UDC or it's busy
[ 1661.697108] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:16:18 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x60000000000000)

07:16:18 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0xc0085504, 0x20000000)
sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, 0x18, 0x200, 0x70bd27, 0x25dfdbff, {0x6}, [@generic="08c29b18e9bf5b0d6b840256ca0778636e6f9709728a274625921f10f69964f776285c46a5c26272a0dca9a84655bdf4a08e885347d75ad5367049939af4a6da02cd5cf48c9f3cfe82d973a7bc9ba080c4585175a5057ed247d02b8fc73654cbcf391f6a808eca9d3bc8496e370ad6e6"]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

07:16:18 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0)
io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x6cca, &(0x7f0000000080)={0x0, 0xbfe5, 0x2, 0x0, 0x80, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r5 = getpgrp(0x0)
pidfd_open(r5, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r7=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:16:18 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:16:18 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36)

07:16:18 executing program 6:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0)
ioctl$HIDIOCINITREPORT(r0, 0x80085502, 0x20000000)

07:16:18 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
pidfd_getfd(r5, r4, 0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4007, @fd=r4, 0x400, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/68, 0x44}, {&(0x7f0000001340)=""/149, 0x95}, {&(0x7f0000001400)=""/189, 0xbd}, {&(0x7f00000014c0)=""/254, 0xfe}, {&(0x7f0000000240)=""/21, 0x15}], 0x5, 0x12, 0x1, {0x0, r6}}, 0xff)
close(r3)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x10, r3, 0x8000000)
r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x1010, r0, 0x10000000)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x5, 0x80000001, 0x0, 0x3, 0x1, 0x0, {0x0, r10}}, 0x1ff)

07:16:18 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000)

[ 1677.728875] udc-core: couldn't find an available UDC or it's busy
[ 1677.729699] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1677.735808] udc-core: couldn't find an available UDC or it's busy
[ 1677.737293] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1677.761649] FAULT_INJECTION: forcing a failure.
[ 1677.761649] name failslab, interval 1, probability 0, space 0, times 0
[ 1677.762986] CPU: 1 PID: 10746 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1677.763724] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1677.764602] Call Trace:
[ 1677.764915]  dump_stack+0x107/0x167
[ 1677.765321]  should_fail.cold+0x5/0xa
[ 1677.765740]  ? __io_queue_sqe+0x666/0x9d0
[ 1677.766194]  should_failslab+0x5/0x20
[ 1677.766601]  kmem_cache_alloc_trace+0x55/0x320
[ 1677.767109]  __io_queue_sqe+0x666/0x9d0
[ 1677.767537]  ? io_issue_sqe+0x7660/0x7660
[ 1677.767992]  ? io_prep_rw+0x7f5/0x1050
[ 1677.768405]  io_submit_sqes+0x4461/0x85c0
[ 1677.768881]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1677.769428]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1677.769948]  ? lock_downgrade+0x6d0/0x6d0
[ 1677.770383]  ? find_held_lock+0x2c/0x110
[ 1677.770822]  ? io_submit_sqes+0x85c0/0x85c0
[ 1677.771288]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1677.771809]  ? wait_for_completion_io+0x270/0x270
[ 1677.772349]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1677.772851]  ? vfs_write+0x354/0xa70
[ 1677.773259]  ? fput_many+0x2f/0x1a0
[ 1677.773653]  ? ksys_write+0x1a9/0x260
[ 1677.774067]  ? __ia32_sys_read+0xb0/0xb0
[ 1677.774508]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1677.775086]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1677.775670]  do_syscall_64+0x33/0x40
[ 1677.776083]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1677.776642] RIP: 0033:0x7fa6f6a9fb19
[ 1677.777065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1677.779087] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1677.779915] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1677.780678] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1677.781465] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1677.782223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1677.782995] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
07:16:18 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:16:18 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000)

07:16:18 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:16:18 executing program 6:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0)
ioctl$HIDIOCINITREPORT(r0, 0x80085502, 0x20000000)

07:16:18 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
pidfd_getfd(r2, r1, 0x0)
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000340)=ANY=[@ANYBLOB="fac9840ddbaffc148fe1421c2b5819a74f519e6566334872c44be807f539125ce5ba02f8dde40e6069a4519b1635b70807a626146525a96ab7ee04021d385bcb72bf365ac9de609c4efad2f1c07909ad1485b2dc3ecce9a5b095bf9427fedef6895ea0c5ba6ffd3c211174849ed4fe47eeb4f61dc7552c42b5f384d086778df4116fa4330e55114d18276abdcb4999bf6beb4adb0d8dce39fbfb18aea872ca7d5d", @ANYRES64=r2, @ANYRESOCT=r3], 0x0)
r6 = dup2(r0, r0)
r7 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
pipe2(&(0x7f0000000000)={0x0, <r8=>0x0}, 0x0)
vmsplice(r8, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
getsockopt$inet6_udp_int(r8, 0x11, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
memfd_create(&(0x7f0000000000)='\x00', 0x6)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r7, 0x0)
ioctl$HIDIOCINITREPORT(r6, 0xc0085504, 0x20000000)

[ 1678.560249] udc-core: couldn't find an available UDC or it's busy
[ 1678.561062] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:16:33 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37)

07:16:33 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000e, 0x8010, r0, 0x0)
r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
pidfd_getfd(r6, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x4007, @fd, 0x4, 0x8873, 0x21f00000, 0x13, 0x0, {0x1}}, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r7=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0)
r8 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0)
io_uring_enter(r8, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x10, r8, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:16:33 executing program 6:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0)
ioctl$HIDIOCINITREPORT(r0, 0x80085502, 0x20000000)

07:16:33 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000)

07:16:33 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:16:33 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80ffff00000000)

[ 1693.469509] udc-core: couldn't find an available UDC or it's busy
[ 1693.470475] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:16:33 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x10041, 0x14)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000240)={0x0, ""/256, <r6=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000440)={0x0, r6, "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", "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"})
r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8000000000, 0x400, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00')
ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f000004df40)={{<r9=>0x0, 0x9, 0x1000, 0x7, 0x7, 0xfffffffffffffff8, 0x81, 0x10000, 0x9e0b, 0x0, 0x1ff, 0x1, 0x0, 0x7, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={<r12=>0x0, ""/256, <r13=>0x0, <r14=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f00000001c0)={r11, r9, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r15=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "46da080096fe92"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000044780)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6, r11}], 0x55, "fd796fe0b718c4"})
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:16:33 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000004c0), 0x40, 0x0)
clock_gettime(0x0, &(0x7f0000000500)={<r2=>0x0, <r3=>0x0})
setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000540)={r2, r3/1000+60000}, 0x10)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r4 = dup2(r0, r0)
r5 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0xe0, 0x59, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x2, 0x7f, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0xfb, 0xf7}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x2, 0x5, 0x7f, 0x10, 0xfe}, 0x113, &(0x7f00000000c0)={0x5, 0xf, 0x113, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0x2, 0x1b2}, @ss_container_id={0x14, 0x10, 0x4, 0x59, "e4ffa53dfa6be233aac7981e586e30b0"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x1, 0x24, 0xc3}, @ptm_cap={0x3}, @generic={0xe6, 0x10, 0x1, "759ba7db8f35180936d967b919e63715dbddf1ee36c488f61ebb898351ac4944235e3087818ea960f247540637d511a929be5a949a81cfb19347697a3f4ad6493537a8b2b0d23997a715abb55ea66932d3746d97267ecbbcad0eea0ae822af2fb28ba4fccddea7c0896267d9db761b8a022d12e98b4b2a2ac402656b91d30dd3384fc2f2fbecbd8ca489b067d06946f6f170df34e39b298568738c368af606755c89a76afd525ade43f7c2d4fe0748d4fcfce5b79fb363c902e95e9662ba6d20e3481748581525487f9c08cc0a2ec4f4c4c5e308c0afa1528a4c244fd61fb1c6a8c0ce"}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3009}}, {0x80, &(0x7f0000000240)=@string={0x80, 0x3, "576f9d1144aac4a47f464035545903177aceda89960967129272a09f677603161a2e34d101a56d95b55731ab597992f0e5296190cd2d02ae2da6b37b1dab508a3fce82fef542f08be58104bbd8a50cd45998ddb4775bf0ae126787cb3900b7d8ca5ba5dcdcc006e487afce7f6880a840299ebebf49a4b34c05b8a82699b2"}}, {0x83, &(0x7f00000002c0)=@string={0x83, 0x3, "45797339eec978ab5fa79d6c386398279dd7407daf08f760b8ee1ee37d79190b9de2a72e5665bc65984477a868f471208b1667257caf324746cbfb312a9a72696f88666d4c6ee9674811a653769f4ee22f0009f307da2373fbe8f0520475395bcf199c4750dedc07942404863b12626b3ad83cd77ba988e6faae6561e718c5e3e7"}}, {0x83, &(0x7f0000000380)=@string={0x83, 0x3, "4069e1ea6d115c97c30d165767c1755eb61be1159166f999d06b68c4b5b75abd4b72107daac9cd13792919d1a7e36701978adc72f198eb5e15d9ffeca2180838980aae724ca6d96d4e1a4fde8b61cd27c93b48893918d409bd1a81f6e183aa5fadcde096f44f734d6602816b11d90f1b601688984fb8bd1b078fadf50e2daa6ac1"}}]})
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r5, 0x0)
ioctl$HIDIOCINITREPORT(r4, 0xc0085504, 0x20000000)

[ 1693.545523] FAULT_INJECTION: forcing a failure.
[ 1693.545523] name failslab, interval 1, probability 0, space 0, times 0
[ 1693.547473] CPU: 0 PID: 10807 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1693.548574] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1693.549986] Call Trace:
[ 1693.550492]  dump_stack+0x107/0x167
[ 1693.551172]  should_fail.cold+0x5/0xa
[ 1693.551889]  ? create_object.isra.0+0x3a/0xa20
[ 1693.552750]  should_failslab+0x5/0x20
[ 1693.553474]  kmem_cache_alloc+0x5b/0x310
[ 1693.554247]  create_object.isra.0+0x3a/0xa20
[ 1693.555079]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1693.556045]  kmem_cache_alloc_trace+0x151/0x320
[ 1693.556973]  __io_queue_sqe+0x666/0x9d0
[ 1693.557684]  ? io_issue_sqe+0x7660/0x7660
[ 1693.558349]  ? io_prep_rw+0x7f5/0x1050
[ 1693.558957]  io_submit_sqes+0x4461/0x85c0
[ 1693.559642]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1693.560424]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1693.561217]  ? io_submit_sqes+0x85c0/0x85c0
[ 1693.561889]  ? recalibrate_cpu_khz+0x10/0x10
[ 1693.562592]  ? ktime_get+0x158/0x1f0
[ 1693.563184]  ? setup_APIC_eilvt+0x2f0/0x2f0
[ 1693.563863]  ? clockevents_program_event+0x131/0x360
[ 1693.564662]  ? tick_program_event+0xa8/0x140
[ 1693.565372]  ? hrtimer_interrupt+0x771/0x9b0
[ 1693.566082]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1693.566921]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1693.567758]  do_syscall_64+0x33/0x40
[ 1693.568358]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1693.569178] RIP: 0033:0x7fa6f6a9fb19
[ 1693.569780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1693.572609] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1693.573812] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1693.574936] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1693.576081] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1693.577215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1693.578350] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
07:16:33 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x1, &(0x7f0000000180)}, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)=0x2)
setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000100)=0x60, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r4 = dup2(r0, r0)
r5 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r5, 0x0)
ioctl$HIDIOCINITREPORT(r4, 0xc0085504, 0x20000000)

[ 1693.688038] udc-core: couldn't find an available UDC or it's busy
[ 1693.689138] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:16:34 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2881, 0x5, 0x8000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:16:47 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000)

07:16:47 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38)

07:16:47 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:16:47 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x80085502, 0x20000000)

07:16:47 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc0ffff00000000)

07:16:47 executing program 3:
pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000340)="224cced54a8900d77de53d64ee0a30181583d8cf2c5e3b77ec059404354a77ec1cb4148e92ea42c41860e6d447a3e4e7c5c32901a313747c26767a23b4a741be5f9b504dda3376929814887656bc516367848d9bd4d8675fa94eaa909d0135870e8ccbb526ad43bd76cbaf3d9eb27fdd1781111648ea9ef914f0f704c235b43ad31d047abba8e098b82b", 0x8a}], 0x1, 0x1, 0x7)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000400)={0x8, {{0xa, 0x4e21, 0x2, @mcast2}}, 0x21a82d164692c15f, 0x5, [{{0xa, 0x4e23, 0x7d58a204, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}}, {{0xa, 0x4e20, 0xb281, @mcast2, 0x3}}, {{0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fff}}, {{0xa, 0x4e22, 0x3, @loopback, 0x9}}, {{0xa, 0x4e22, 0xc00, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8001}}]}, 0x310)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0xc0085504, 0x20000000)
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0)
shutdown(r5, 0x1)

07:16:47 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
r7 = syz_open_dev$mouse(&(0x7f0000000080), 0x8001, 0x400000)
ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000340)={0x1, 0xfff, 0x2, 0x0, 0x5, [{0xff, 0x0, 0xfff, '\x00', 0x3}, {0x4, 0x7, 0x4, '\x00', 0x400}, {0x1000, 0x2, 0x9b4e, '\x00', 0x900}, {0x5, 0x4, 0x8, '\x00', 0x2100}, {0x7ff, 0x4c9, 0xfff, '\x00', 0x3083}]})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1707.394803] udc-core: couldn't find an available UDC or it's busy
[ 1707.396295] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1707.398690] udc-core: couldn't find an available UDC or it's busy
[ 1707.399443] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:16:47 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x589242, 0x0)
syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000180)=<r5=>0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000340)="9decfb9cc36b781302f4eb57a716acfc3d2d3b587e8acd8ace78b21f0d5df0e236ba524249fc6fabf49b81d2874b43b042c1b86ead8833bbf5e6927eda96c57170b1af343b8556568a101fce90f6fec8d85513716a52a8da2291352c266783e8562afa5d9a62a2df9115d854fa0783de5954b5d97ff79bda524567106e505945c004d42f77b6e857a3665f7e0af4c2dd6f44d622e0a2f8e43cf640c1974c353aa3fa212473137b5091b95a150bf15a8af5f3279288f876e4b244d20fd96de309adff7f64781fea611574eecec30b97200c47f2ded10da0e5aa09006e2596a770b62e8b5f05c2ea9fd70bccf2d0e8f8bed395a98306828fa96222846580b5d873d265725789b4043095b5aa898be2f3ed56a6ff3be96e671db3d33fdf06176138e2fa47ce41d26dd148f596646f6ef4055bd6f5ffba7206cfab7b9090614426966e5a93ccc0039623a72052b4b5c14b8403ebd8ea957f0dc740cbed69533d6e28d9c99c807a41715d0515f184596685f552fdb85b64dc1f93fbb5fbe575358553265db6e39821bdb78476684eac085d37288f4b6aa3ecaaf61ecc66620054c1cf421b2d921e4d045d6c88e0a457079f6706aea349db7f091f59678e524fa4c8f0bc1eb208c6da8edae8e04d11542808f1c9a81a58e70298a4466ab6166f7f3db97216ab86a7ada88cc4859dc13eb3905843a76e5143c16fae49dfd636e868a774d84e7f2f7fabffdf50fcdcf326d09fe8eeec80f26530ccaa503f9a5b6905895e37d4f4ec430c88b046e30ee1b5bcdad13228da6265bd8a9f8f5259203103e4b3be2a7c1a35087a19f14c92cc345d7705acb0cd4ee43a502091d522262e1b20e970ff879c550e920fbb2b239480ff3aab5615221a0b47cb40d6b735fee14a49bbb0a5400258d388132f7d888231b8e6c715dfcb646bccdcb39d16f543e47179cde8d8c487f0f94235063e9af759fe1d9924558d98e5c62727efa1b5070cdbeff691010c3eac7d5f9a3431bc8959d382224571f832ff62b5e01f50f1bb61ad6dc9f69ed8910ecf593c0ba6e8c00a325cadfd49388b28a091e5830547340d74ee345365cbe164bf120067a3f5e12743f29c6800e00827f590b223230cb6610ad94ce86e51f9115091e11f3f0e5d67002696a529b3c6fae3f233b9465133785c2c91ffbe87e024505d61ab5c45290929c2b74967ad829cc5b1dc3b76b113820dd14a6a1e075602e96be6d63b5ead09210977906f3a710abc2c46e3fa0a2aace1381ca69de364ed791814356c1ba46dd54fa491a6a5fb745ea3338fbf0de9c7574e5522a8ab8c6701ef84d4f0caab0430f67cb8c1c25a06fdc08200f3a8ee35c727f763c0d607d957242c3de0250f6d91d042f44a5c711acb115a50301732bfde27a97ffc549153bd193957889e9ec3bfe4955842087b7eb9c578087108e815cc019ec92bdb57d82dfdfe6d64a99f3caddbf4e3f7afa7616dde6b68f5f54486f034aebb1b08a7e2b5cf7893713461de6afba2f502c638fbaaf4d84cd5557edda4ba99ac51b05a73a270b6b9570890e609b570386e0fcaa293fea64081922d92b09e9a06c8972c2e9ca402d9176ad8e322f5c037eb116d86ce94bc257097c8b39380414c845c7d7d926d722af1dcc0e686b36b44800049217719a8668f8d4ca751890ecf0ec0db03ee77957f228c41473e5dfb05eff790c7b722815af616f8c6251a667b405d1768990d7bae248828ee6f737d0c86dbe14fa597fae472df0759b64d81e8344cb544a2df41d7d8b248eba6a63c884b60c05e3070b74f4ccb83103d8ccd6d1cc9f875c0eecbb6a36961e7336626f456c3c11e0054ec9f236bb57a2ca36df5ef355b25c008139d257f4f170912791fb34e080a9896efc9842c960e4b33f241ce94d50755e6ff7e349660b03952b7e2e4dcd8fa0587f3bb008c1604d43d08d5044f748ab494664a3563ba70844c079be7d0be22be4ec826e6cdcce2bc6fdd2e89e422bd18b0b3fb33cefec9da29256aff4a56616fc627b97b24551c1217b329cc61249a7ed9c404abb897766a09d3767d915ca0b5cbb20c31350f4e1889c7190c46f979329df8bcb9a32019d09caad6b6b168d394e0f076b84e340a268b1a1bf0eac95b68b9cc6700164cdca95bdf288d2fc113e8d56f00e4c17aa03afbc9e533d8c7c24eb544a71af7cfb406ba458e2f76d0f53543efbf5e919e290f2acae6ca5e9c18422d92cdc432d9474b6f97b752614f27371a5843b4573e2e3fb292767445a2c523d1ed776723f055f2e18b344949128ecdcdee71871dac2db2d81be2be3cb505f803f55765a0c8c3e0c920ff85abb1e16920fd5b3f7ae9aaa5330722a38eb374f136e1395b47ac36de5f64e0f5c1e0ccb2f1fc8951b1aba38373d5761a5abef9d1267f7ec20c0b5ed1835021389703b899241a4596d94b471404109b0da9bff845b8a5ca770a193144d8c0b32a7acdc80eeec269548157b49911e82f32342ffb41070ae2527835bbbd91d09a1b3a0b417410205bf54dbe9e66b72bede96833b08b7d55918d2609b9fd3500b9dcc39f7fe4cf0f3bbe13bef5ce6c3586ec47df6a03b1f1134887800e9d8c3650c2acad42af3c1204accc8b9094cd57cc0407a5f20778f231f6fd42e4d57b3addd634a3d236db213a42eb332ee2c04fa8fe42bed37c998492dbe904df94d8cd72a67f5ab55ae4a318c31b1bf5674ebe1035e1d171ea7cbd22db8f92f2bc1e53bb70ab984b0ae1ff6666f155f76ad1a03274cac936b2b2703120b161e4f63b55ba53f354c481c5e2800ad811e09bd9595471ac21b74dff6e50a9504ad0941b9ff76ccbcb7d470ede8c9843ecd6a0210749984d37e578c1eaf637524a31ddbf7ce87a89959fc168c18607a89548d371bb9dfb40d48a1b3814cc148cc329a8392da87f4609e87c3e8986c69c752142c54f0dffd63dd11cdd8bc8dfdf2d8e917943ec37541b744af328aa627c91a79ab7a8273a8b0715fc7ca4121bf8a834ec73f6e4fcc51b8ec87679d7f2719d7de09f616eb69ef6f2877b833c31129f39e8274e7e1fce38f4176c58e3247a1313095ebf97d043979ce3ecb1684a9d626764ff0510718508088c43c0727a1abed1a54f94c7011371bc1cf8586789574748d8f606ea7c87589704a124f74eccdf13bd111e14f708f94cc8771d4821d39bf1a9bbd9de00228e8ad74b5baeca92fbef039b3e43851f3fbdb4284739d3447acb350501fc0b7819ead6754b3ba7e2f6cea4b3369742398367c540e68392130666cb2393f434fef96daf357eaba660d3d82db8d53a523f3f4fa021080090e0ceb9fa02787a87cd9e4bc0df46e0493693c7a07aa97520674f5c7b55d67b2398384f386b52c46146cd7b261cd8995fda970feb1761df4d2f75a70b1d0706fefc2a9ab2e0583d31551ddbc197b6424fef086ea61dad3ac6ff383ba50880a06ba488b1a040ae81447d8547d9f5f15d34d62ef634bbcb0a18177710807f74b770bdff934ddf2d6bfca5e5a7983e329b53bc852908279f042d3b5ad5308833ffe153ac73ec8a84c49351be53316b90e1633cc8033f68cc0fbfd1947907956d363e5d85b80e5757afef1e6a4a9eb48eae2b293be59dd63876c6d5aecc9c46a76bed09c7ec09fa6e8a8a97fd042ca8c1f15ba3f3a240247804a156b6476c1d8527fcf13067f4cdaf41061dbc865d7fada0447db66fdb024c10c7bfb2170daad67d33946871871d6223ffb60610c43cdcdd23b8e00bc1f4084e0536d0e8b43ae9ec2623033f4919bfe1255617f1e595a3cea3731e6d5f02ed58136e263ab84d5f96217c7e9ae8e90ae58fe173832fceb3e31dfc4b23694967e90d4b9381c37e070d56dc0a1a6a2aa0c7cf33a54086f95667280d3adf32ae4de309f2976d231b7a64aef3f66d5157a6bed3652f7142886c5779f467b5d2ab2254072beea140e2d3da7ec5a32d0245783d94c8d920bcc808e850fc2f2a07a31e58c260da8743f71c1805727214dba3c1b4fd1f6cb26dc13ef538cc1d84fe270f659283e3c57c4af0e2c5f7959d5e1a0279272fe18e92c8cc50baf7e034033311356046db71afa5b881e4be49ec74ddfe5789e1a9898d58e57d6029620d25bdb4a45d821ecc51aabf6ef1291fac2f54e83c4dffa37f1d33e6904df9fb31f81e54112064a5b813ee9634ae722d186fd87c7525b2b9e71aff2da9ccb4431f14925f2b4cde3deed90549d67b554c848ebb0ec930dbc7b99e9b1867e7eeecf632cc0aedf645dbb15d8dff546353a8edbf8bec7f3827cd5804d95dc954b6619d8bff926cbd0ca0d57ac229d7fc02a608f6802d66d28d72c897324007b1adbcd8e8cd5091540cd85a9f317f78a54f907c09340f1bfea80872c675936fd48a9c7a3b7aa8eeef57f59c3ba1c02049e440090f82eba3b650d715310c2b531f8efad5052a29c14abba9e82300fe0aae3fafef8b5be20053cb907a263e53e4aa20a3e6c3ad53c52c38ad46d034c4d38727166b0793483f3b5a874b74129c1b12e5cb5fd0a75989930346109da35be3817d61f0ffa75f5a2fddeb0338c18fdab264e1081bbce94334d8c9c691f07d603d3426ca3c77b65ee252ef012bb5e36c8f5c600d78960a13ff01c37cf488883e8aeb2e350ff2ad2f440e37c046015ba3c881c008efade3ffee5f6186a564707f46d2514a8695e4214e3190d0a32da546d447250f515e6a3bb2650e36469e3f97e4bbc8270288941fc5f94c5e53f698a886df2fc22a5717180d95162b8e40d94262cbf8eed2e2397c541fc93725a8f93a15b09a12b531d6f3cea5f218f804e7aa19c2bbfc1b7e67bd8a24dc66b02ce84f07dd69b793aab4a5612d53d472425659571c347f8a846150e599eb1b070f29fd9fa4ac149317f8dac31f20039565f56212a7822a7ad32080b97491d8d86af415da62b2652310dcc0a00b4e9aa8f0427499fb5056e51a137224de62561f776edd8aa0414b88f11c13e1001e40aceb23d496ae08906161d35712a380e1afdb18d537861c26546404cd94eac74aafdc350a15f59a30e06b2209b1a8467c85d30d3c3489f265dce6c131ff8b1f69d6ec04219c20ccb3cb5f279a16791eadd15e062685d0b2faf30d768b65a0aaa9ec534bfbfb2eccee4e16d75040dbee1b05eb0a2df9c46883ed644ff788f4f443f94e7ff53dbbb89193e398a880416e894a390b9857d69aa3c96b0fbcca627f7c9730a48d9f975973eba2c5b24e69a0194906b22be4f39770fa327351a8da3627bdc82f73e2dfaebb967ebaaf2b9a35510fc1b914f00c7c8854a3956b3c625cb5d9d774a3548a513dc10611308b318575d8fcd5ec943de2130339df40abd225328ae44af505a00c49ded030586e684c9353490635ba620ed937bbea665b59b31e850abe995399761bceb3be34aa7fedff0b3eb7e86ef7fdb5ecc9af57e27a6ed76c02344a715a542fdd9245a383ee8d4b1eb958947dfd2e454ad573269bdaf61335599d9012b306c2eda03dba999c60f1ab48f6137dbb36bb9c3216c5b0a262947f756b50004a0fef19d2859d2818c598719f95533d62ca0aeffd1e4a0e8f77b42889d0ef541ffd9d2c5e8bd5b516c0d2722fd82b6dce5984ca03bbd34864952e5a234814f6dce1695233aec77071125bcfb60344237df263ed6d7289551db22d55f66bd2d7ab099706bb611f9019c80de1c1267b80bd41e4e875ac725dde05f8b72e552c09c8bc6c986589c5da96ed2d42b4e1e99ab1b49f61d7abf3788e6ce1f848ab19dd3c8c88ac583ca4daed328c887a1f98fb05ff9a2cab73", 0x1000, 0x4000804}, 0x80000000)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r8=>0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0)
r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r9, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r10 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, r10, 0x0)
io_uring_enter(r10, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001340)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r0, 0x3, {0x0, r10}, 0x4, 0x149490c7510aeb31, 0x0, {0x0, 0x0, r0}}, 0x800)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r8, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1707.435818] FAULT_INJECTION: forcing a failure.
[ 1707.435818] name failslab, interval 1, probability 0, space 0, times 0
[ 1707.437319] CPU: 1 PID: 10844 Comm: syz-executor.5 Not tainted 5.10.180 #1
[ 1707.438092] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1707.439020] Call Trace:
[ 1707.439323]  dump_stack+0x107/0x167
[ 1707.439754]  should_fail.cold+0x5/0xa
[ 1707.440193]  ? io_setup_async_rw+0x180/0x580
[ 1707.440690]  should_failslab+0x5/0x20
[ 1707.441132]  __kmalloc+0x72/0x390
[ 1707.441529]  ? mark_lock+0xf5/0x2df0
[ 1707.441965]  io_setup_async_rw+0x180/0x580
[ 1707.442451]  io_read+0xe98/0x11e0
[ 1707.442852]  ? __is_insn_slot_addr+0x14c/0x290
[ 1707.443356]  ? kiocb_done+0xc90/0xc90
[ 1707.443800]  ? __lock_acquire+0xbb1/0x5b00
[ 1707.444306]  ? __lock_acquire+0xbb1/0x5b00
[ 1707.444792]  io_issue_sqe+0x2e12/0x7660
[ 1707.445265]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1707.445855]  ? SOFTIRQ_verbose+0x10/0x10
[ 1707.446316]  ? __io_arm_poll_handler+0x59b/0x9e0
[ 1707.446851]  ? lock_downgrade+0x6d0/0x6d0
[ 1707.447324]  ? io_connect+0x610/0x610
[ 1707.447769]  ? lock_acquire+0x197/0x470
[ 1707.448219]  ? find_held_lock+0x2c/0x110
[ 1707.448682]  ? __fget_files+0x26d/0x4c0
[ 1707.449151]  ? lock_downgrade+0x6d0/0x6d0
[ 1707.449632]  __io_queue_sqe+0x90/0x9d0
[ 1707.450089]  ? io_issue_sqe+0x7660/0x7660
[ 1707.450568]  ? io_prep_rw+0x7f5/0x1050
[ 1707.451012]  io_submit_sqes+0x4461/0x85c0
[ 1707.451507]  ? __do_sys_io_uring_enter+0x6b5/0x1730
[ 1707.452076]  __do_sys_io_uring_enter+0x6b5/0x1730
[ 1707.452630]  ? lock_downgrade+0x6d0/0x6d0
[ 1707.453107]  ? find_held_lock+0x2c/0x110
[ 1707.453566]  ? io_submit_sqes+0x85c0/0x85c0
[ 1707.454072]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1707.454627]  ? wait_for_completion_io+0x270/0x270
[ 1707.455175]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1707.455704]  ? vfs_write+0x354/0xa70
[ 1707.456135]  ? fput_many+0x2f/0x1a0
[ 1707.456555]  ? ksys_write+0x1a9/0x260
[ 1707.456988]  ? __ia32_sys_read+0xb0/0xb0
[ 1707.457471]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1707.458067]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1707.458647]  do_syscall_64+0x33/0x40
[ 1707.459077]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 1707.459658] RIP: 0033:0x7fa6f6a9fb19
[ 1707.460090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1707.462149] RSP: 002b:00007fa6f4015188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1707.463017] RAX: ffffffffffffffda RBX: 00007fa6f6bb2f60 RCX: 00007fa6f6a9fb19
[ 1707.463828] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 1707.464612] RBP: 00007fa6f40151d0 R08: 0000000000000000 R09: 0000000000000000
[ 1707.465401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1707.466177] R13: 00007ffc5826580f R14: 00007fa6f4015300 R15: 0000000000022000
07:16:48 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000080)=0x1)
r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
pidfd_getfd(r6, r5, 0x0)
r7 = syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x0, 0x8, &(0x7f0000001640)=[{&(0x7f0000000240)="b6b584ab76f0141860eaeb4e7c49a81514098bc80fb0c6126a90bcf2fa77a33ad46bfe778622f601ff04af3df2d32e61bcfcfa465bd36d7ce8c64912e5d0dfc8ebbd1d823a6bc92150a8cad7ccd2d86e47b90abb8e8008e1f8da", 0x5a, 0x6}, {&(0x7f0000000440)="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", 0x1000, 0x4}, {&(0x7f0000001440)="4146a37eaf1666beacaadb36ebed8269b66285a9fe649179adcc53a72aca5a57df3e25b64b856a5b9fa4a9f14f63927235796cb1e841baa28baaf20a15a6336a06f2286e5bca5b5201d8fff5a24f9ae9e2e677541e38edeafa82ee1c90e0cba507ac1fc7085af50f1a374627546535d8f0658de8af0700d7b03304cb761e648faf613597eadbff394247a7b47cf36ddf2bd612c0c6efe10eb748676be27f55078e174cd8445639", 0xa7, 0x9}, {&(0x7f0000001e00)="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", 0x1000, 0x9}, {&(0x7f00000001c0)="d235eb835c3bd277ecf14d40fc578aab89f51e44e2725754ac7461e80212fbeb646177273a5d64c67981", 0x2a, 0xd4}, {&(0x7f0000001500)="8a728e7915f9f2515c83c0f5211c8d530369174bae05a08939bdd5fec0d6179c734232bcdb051d0e6d40d934d39ab516356cfb5dbc17bed6bd903f4347bb4a07dc415927c9a1bc9c544c308992222cffa9586b90fda051e317cfe1f3e4", 0x5d}, {&(0x7f0000001580)="65de6a7c996e974a74", 0x9, 0x100}, {&(0x7f00000015c0)="0ba86392b04581eb55f83f992a702cca6279667ad7a0b92c167ee55445cc63b46658d92f882fba46f9acfa20ba2bc0799d40a0a01eb7c167d728a675ed2b0f42bfb9b777dbda447b84b988bc19ec", 0x4e, 0x1268dfe6}], 0xa10098, &(0x7f0000001700)={[{'\\+\x0e/('}, {'/proc/thread-self\x00'}, {'/proc/thread-self\x00'}, {')##[$$'}, {}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@subj_type={'subj_type', 0x3d, '*-'}}]})
write$binfmt_elf32(r7, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x81, 0x92, 0x81, 0x0, 0x2, 0x3, 0xffffffff, 0x2, 0x38, 0x1b1, 0xff, 0x968, 0x20, 0x1, 0x7, 0x9, 0xffff}, [{0x3, 0x10000, 0xef, 0x0, 0x9, 0xffffffc0, 0x8, 0x7fff}, {0x1, 0xffffffff, 0x2, 0x200, 0x8, 0x6, 0x2, 0x81}], "bb4fd6ec7cc7c6e40de81dcb9591ca62c4eda3d37be857a004d9d44687ad4506"}, 0x98)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:16:48 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1707.920929] nfs: Unknown parameter '\+/('
07:16:48 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000)

07:16:48 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x80085502, 0x20000000)

[ 1708.120439] udc-core: couldn't find an available UDC or it's busy
[ 1708.121248] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:16:48 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000)

07:16:48 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000340)={"a0c6a9ee72709153ca9e7987e3f27f89", <r7=>0x0, 0x0, {0x0, 0x3}, {0xa91, 0xf7}, 0x6, [0xd06, 0x3, 0x4, 0x298, 0x1ff, 0x3ff, 0x100000001, 0x3, 0x1000, 0xa7, 0xde, 0x80000001, 0x8, 0x5, 0x9, 0x7fffffff]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000440)={{r6}, r7, 0x10, @inherit={0x70, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000500000000000000060000000000a983cd683a12f499ab46ba6a95fc175d000080ffffffffffffff36000000000000000486d200000001000700000000000000040000000000000000000000000000000400000000000000276e514f00000000020000000000000006000000000000000100000000000000"]}, @subvolid=0x3})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:16:48 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
dup2(r0, r0)
r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
r2 = perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
pidfd_getfd(r3, r2, 0x0)
mmap(&(0x7f000011c000/0x1000)=nil, 0x1000, 0x2000000, 0x12, r2, 0x8c703000)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r1, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r4=>0x0}, 0x0)
vmsplice(r4, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x101800, 0x0)
write$binfmt_elf32(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x69f)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
ioctl$HIDIOCINITREPORT(r6, 0xc0085504, 0x20000000)

[ 1708.343113] udc-core: couldn't find an available UDC or it's busy
[ 1708.343884] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:16:48 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:16:48 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1708.778589] nfs: Unknown parameter '\+/('
07:17:01 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = accept4$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x800)
read(r5, &(0x7f0000000180)=""/110, 0x6e)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:01 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
clock_gettime(0x0, &(0x7f0000000080)={<r7=>0x0, <r8=>0x0})
fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, &(0x7f00000001c0)=0x3)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x1, &(0x7f00000000c0)={r7, r8+10000000}, 0x1, 0x0, 0x0, {0x0, r9}}, 0x200000)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:01 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:01 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000)

07:17:01 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:01 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x94, 0x0, &(0x7f0000000200)=[@enter_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0xa, 0x1}, @flat=@weak_binder={0x77622a85, 0xa}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/241, 0xf1, 0x0, 0x2c}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}, @free_buffer, @free_buffer, @request_death={0x400c630e, 0x3}, @acquire_done={0x40106309, 0x1}, @clear_death={0x400c630f, 0x2}], 0x8d, 0x0, &(0x7f00000002c0)="b93a6983e381ab30b7c6810e328056499784a83251d62228312b70fd446b168c45e7f26a76fa520a5505aa2af593393cfea498c24fbb49588180cd30632351c0562c8e1cd289c04546142a5dffb02bcfc34ec2e1be73955b722c31eff4b1f55ce0b3fed370119c412febc2acaac4fa29e2e8d59d8e0f619fe9f400d2f1158e220665a6a1deecb2db6b97d228b0"})
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0xc0085504, 0x20000000)

07:17:01 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x80085502, 0x20000000)

07:17:01 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1721.021952] udc-core: couldn't find an available UDC or it's busy
[ 1721.023447] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1721.043447] udc-core: couldn't find an available UDC or it's busy
[ 1721.044907] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:17:01 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0)
close(0xffffffffffffffff)
r3 = getpgrp(0x0)
pidfd_open(r3, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:01 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:01 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:01 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x80085502, 0x20000000)

07:17:02 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x60, 0x0, 0x0, 0x0)

07:17:02 executing program 2:
r0 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000dc4000/0x4000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
syz_io_uring_setup(0x645, &(0x7f0000000080)={0x0, 0x4df2, 0x30, 0x2, 0x214}, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000e3d000/0x3000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0))
r5 = syz_io_uring_setup(0x4d50, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2, 0x3a9}, &(0x7f0000c1d000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000400)=<r6=>0x0, &(0x7f0000000380)=<r7=>0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x2710, @hyper}}, 0x0)
r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0)
syz_io_uring_submit(r9, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
syz_io_uring_submit(r4, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000c2b000/0x3000)=nil, 0x3000, 0xc, 0x1}, 0x17c)
r10 = getpgrp(0x0)
pidfd_open(r10, 0x0)
r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r12=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r12, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000340)=ANY=[@ANYBLOB="0409354fdc09f267e1"], 0x14, 0x2)
syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:02 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0xc0085504, 0x20000000)
pipe2(&(0x7f0000000000)={0x0, <r3=>0x0}, 0x0)
vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff)

[ 1721.863775] udc-core: couldn't find an available UDC or it's busy
[ 1721.865633] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:17:02 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:02 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
getsockopt$inet6_tcp_int(r7, 0x6, 0x1b, &(0x7f00000000c0), &(0x7f0000000180)=0x4)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = syz_io_uring_setup(0x20004d4f, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x1, 0x56, 0x0, r7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0)
io_uring_enter(r8, 0x58ab, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r9=>r7, @ANYBLOB='i\x00'/16])
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r9, 0x80047210, &(0x7f0000000280))
io_uring_enter(r8, 0x3847, 0x3f3f, 0x3, &(0x7f00000001c0)={[0xda]}, 0x8)

07:17:02 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
io_uring_enter(r0, 0x2d50, 0x981a, 0x2, &(0x7f0000000440)={[0x4]}, 0x8)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
r5 = pidfd_open(r4, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_setup(0x6454, &(0x7f0000000180)={0x0, 0x5bd7, 0x1, 0x3, 0x387, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000340)=<r7=>0x0)
r8 = socket$inet(0x2, 0x800, 0x2)
ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f0000000400)=r4)
r9 = socket$inet_icmp(0x2, 0x2, 0x1)
syz_io_uring_submit(r1, r7, &(0x7f00000003c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0xffff, &(0x7f0000000380)=[r0, r3, r9], 0x3}, 0x8)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
close(r5)
r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r10, 0xc0189377, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000010000001800000024f06635af0a378c5fb23acb9567e48928a3821ef50c6f248f791b6eb97243014c6c414a156b51dc4255745e5130df1b556c28a69fc3c5def7a87ec387969ed298ec7f26", @ANYRES32=r5, @ANYBLOB="53000000ff0f00002e2f66696c653000"])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:02 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:02 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x11}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x4, 0x2004, @fd_index, 0x400000000000, &(0x7f0000000280)="a871b3c099be2bc32b14c91bd8c17184e2b9386d1941463187616d05e4e9b9d4bc2b8559c00bc5d11bee229342d9f7a298b47249e40e4be6a5e3c516b28f0b1e3c8d9710b52a8526397857ff26861a3b65f22422ebac9e6fe6422c7a4b05f8be0adbc05200df46d72cdb5ce53567ce84eb240a235d40f7e92c195f0cf9c91bb4a6c23bc7104bcc2ccbac8e508223926c340fc32ed0cc7726818efe81e49155be1811b2440d9414f534b18a15db17589fb3b7a2c2d3", 0xb5}, 0xa99)
syz_io_uring_submit(r1, 0x0, &(0x7f00000058c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x1, 0xc93a, 0x0, 0x80000000, 0x2}, 0x2f)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf512, 0x400}, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001d40)={'ip6_vti0\x00', &(0x7f0000003ec0)={'ip6tnl0\x00', <r7=>0x0, 0x4, 0x1, 0x2, 0x3, 0x24, @private1, @rand_addr=' \x01\x00', 0x8000, 0x20, 0x4218, 0x2}})
sendmmsg$inet6(r6, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)="9159bb8d3e992a5281ef3652887431785a30ac3f9e68cc84912797a0b203b1d2e181ea6c5fdf1b139ee77f81bb3458125831efafb6a322c6424e22f5a1580e0be2cdc8c4ac86ed27d6a374fb2d3b28b211044a9aa117618036fd40fb75560a97008768d3206f461f991c76674553ec070a5d772c9505f0d030266cabe53e8b8620aca14d33729146bee63a5ee419c637037965466a6c044061c32af8ba166f8f402c150a08652ea68d6a7b4ebe8d265cca842b18e91bc06341cb66aa60b767f0751154b706ff7fdf24c3e4a6542269a8aa620b3c0cb67dce252f60634e618b2e3d16b4e20d6c8deac7325190c9", 0xed}, {&(0x7f00000003c0)="d7c317a4395f949850692de19b9b9ac596a1036c8ce0ff81e406d45806ab1a8d58d9ae6ec83bcc215430a4f7fe98a3bc9a11b0a98f23aa754b21a5bba555e7ff6a4c33198efbdc70c73be9f4b81bda6dcc1023929cfc52b4e178144732909017c9812bb6991b7133eec83521da3adc1159a037cb51e2314419c746a4f6ec8a5bfab401885f37477d2c45709ef1be98f809eb3b7a7339b7e80f0ca0428a69456cb17dfa840b3e8142323bf48b823198589adb4cd2eed6b5686cbb13f00086654a26fa87550fed02737c6211c68ea0fe6bcc36fc211c7526bf615c96e282bf773c664b27570c6e7b1e98e4a4eea5", 0xed}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="101be467c404", 0x6}, {&(0x7f0000001500)="313724083e2afa2d7cf68567825b72c60edeeeb1c1e6e3d53e0874d1aa49d7aa7f9177556b8a9ef39d43a9e68796b007c716b017af8a6d5e655165f9cf11d32b8c11d0b362e45d9c9fdf91fa85b48c098d52dd146c60fae1b3a9a5e62034471b9e3ec96106b968f07333ea3b8f86482b409b02216ba7b9fff83741", 0x7b}, {&(0x7f0000001e00)="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", 0x1000}], 0x6, &(0x7f0000001680)=[@tclass={{0x14, 0x29, 0x43, 0x3}}, @dstopts_2292={{0x60, 0x29, 0x4, {0xb3, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x1760}, @calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x8, [0x4, 0x8, 0x20, 0x1, 0x9, 0x80000001, 0xfffffffffffffffa]}}]}}}, @hopopts={{0x100, 0x29, 0x36, {0xaf, 0x1c, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x1, 0x2, 0x20, 0x0, [0x80000001]}}, @ra={0x5, 0x2, 0x1}, @pad1, @hao={0xc9, 0x10, @empty}, @jumbo, @generic={0x0, 0xa4, "09b6d1ebfe6e229d7ccc463d79bdb8c6f39f14e48404ae65d958fb247c39346d5f081a72079bba312eab4de9af5207ee4e61ee4606a738d76f3c16e46892f019f067d3637c221a89f2df2e8af7a834febac15984b38448b28180cbf64e85916ceb537cd06e4fd71af60159a1a78c120c21be8994a7c727b1d96362e4c316f68c67f640f309b54dcec5b9621bd504653f8b46afb6f70943493b0a9803899ac21729c5ee23"}]}}}], 0x178}}, {{&(0x7f0000001580)={0xa, 0x4e20, 0x1, @private1, 0x40}, 0x1c, &(0x7f0000001a80)=[{&(0x7f0000001800)="4530acd061cb9d03507333414113bcdcfc621306453d69b0d0c054112033054aea60247b2c9f739a3b84e6230a8971fcb1e59bdce06c8f286e1c70eead1c8ed87b804406de664dd8ad983c50d19f2ef27d1860f535f2340753fee10064b7399a80ebb61e93076e2f46c8fee1", 0x6c}, {&(0x7f0000001880)="3653b6a7e4b1af94c32938f8934fcccd6a66697eb3d16c0102e5f4bef6bce1c161d25672e8ed16f5067ca3a73cd7430a65c1fce8e29ff304af5cf43a54f46a56846458dc382c39cadb4036d10b489fd92b6df58075782b5c5315952909f4b713cd71fb15e781865cfb9561b51f81f461693901e6fd7747b747f4c3f192348ee0f61b286960398065ddde2d7edb388d677785b72ca69760d670f94615a3ce10d18d74478ddd39b613495cd3bb40eaa3b4bec5cc34394482349c2945acfed85f72cfda54ec90deb54a8de871c617114f067e2a51b648ea7f11bd2efb527a9e", 0xde}, {&(0x7f0000001980)="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", 0xfd}, {&(0x7f0000002e00)="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", 0x1000}], 0x4, &(0x7f0000001ac0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7f}}, @rthdrdstopts={{0xd8, 0x29, 0x37, {0x8, 0x17, '\x00', [@generic={0x9, 0xa8, "44247f5332d3fe2701fb0609480ed82514cef714d3df6a502d4189b290246e1f0df00dbaa425d75c0238a765a4d4a5c2c4474b0b765f72a7dce6923cc21c38fcbffcac1b09046bbf0ff635b43fe1cf78df989ddc447964a4ceed4da8749f9e90bc5deeccf59deb81b19631f79f6daf27b6da3095a3684ba9bb9f9c835dca642e4f5c366da643c7dd5a403eeb7c2d01b76d180c74273cef2125dd11cde04a7a4b060262ac6052c624"}, @jumbo={0xc2, 0x4, 0x10000000}, @jumbo={0xc2, 0x4, 0x7}, @jumbo={0xc2, 0x4, 0x5}]}}}, @hopopts={{0x28, 0x29, 0x36, {0x87, 0x1, '\x00', [@ra, @enc_lim={0x4, 0x1, 0x1}, @pad1]}}}], 0x118}}, {{&(0x7f0000001c00)={0xa, 0x401, 0x81, @mcast1, 0xfffffff7}, 0x1c, &(0x7f0000001d00)=[{&(0x7f0000001c40)="c6d946d9eb7a6fbb3be3dd0e23e3251a34f9f8a15f7c90b1f3778ebfbe692f761329d278e70b70829a87b0772d1a8f723bf5d7f605b9993c42793eed2143bfb92298d49238205b7d296f4c111f986dbe5ffef4ebe6b982d2c276274c134054db7bf1df38cdae5c5e9e6e350ba95dc52452dc3d9735f26cd035fe8301a38e4d42a3e9095030d248b29c1176c424376b4d00d193ece05ca39ffaf58165a39a", 0x9e}, {&(0x7f0000003e00)="a5a614a6070af9e07dac416baf8d96941d93e5ed823d8c2553a635f15f1f1ade0a0ce21dfdb89b4e90a809211c557e628c0d551acf586296463af272ff880abdb4e9a7b205f1ea44c41038bece6558f579f2c45acfc719d73b3451e76ff169f4499f2d04032ccce91666d1480a886757caa236379c75bdff6444bebde4b7f39859fdf1e33df3d87bb7815dca76377df6480f3bc7a91b1a61889905097251", 0x9e}], 0x2, &(0x7f0000003f40)=[@rthdr_2292={{0x88, 0x29, 0x39, {0x2c, 0xe, 0x1, 0x1, 0x0, [@empty, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x3}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7fffffff}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r7}}}], 0xc8}}, {{&(0x7f0000004040)={0xa, 0x4e22, 0x5e1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe8d}, 0x1c, &(0x7f0000005280)=[{&(0x7f0000004080)="233afb67106292ff38810cb73afd19451fc7b96bb4fb4c01da6456f3f0c66062879e6103a10abf7e502336eadbd9094371d85b5d33089d30f150803e2f8bd36b4d03bc194bef146fb524213f6d4c", 0x4e}, {&(0x7f0000004100)="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", 0x1000}, {&(0x7f0000005100)="60b7d9b899da1161df8c4b41be6d41fabfd1ad4d55540dc6aca66635a375e6eaada6620dfd0684b74130af527067103cb195bb77a79b53b024ed266d9a391a2cdc9e67fd448fc6b4a28530348efeb0f26ae9f2bc831210b504f9a8d67000b399fd5683507cf91192c75a1b", 0x6b}, {&(0x7f0000005180)="2555cd9079b601a6b7f44ab52286", 0xe}, {&(0x7f00000051c0)="9ae2689872dde0a6ca7dd4f0c7af9cb2931ceb56212134d6373357720b3497bb0577a3acab632f85e6761d588a9ab3efeb48191cf91c0545b971e29c96272f0e3644268e6178cc6f84b3e7c7baf8e749ca3b7c92205c8278593f1e4490df6a20e7aca7249f4f9d372b1b3bae61038a65bb28757ff5cfa1af33cd30c1530c2ad2aa9c3bf9", 0x84}], 0x5, &(0x7f0000005300)=[@hopopts_2292={{0x110, 0x29, 0x36, {0x8, 0x1e, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1f}}, @calipso={0x7, 0x38, {0x0, 0xc, 0x1f, 0x80, [0x3, 0x4d6e37f2, 0x5f7, 0x5, 0x0, 0x3]}}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x8}}, @generic={0x5, 0x7f, "fd62ad3ef8f82ce333323649cd859764dca5bcbadf00ee338bc4e4f11f8c53ae41e7fcae68ba3ca86549782946a85e6d0028af3010d8e77ad515910e6df6ff7f50f4a24f977ce6184bd8b589f8766f546bc92fdf8598a2d9abc0aab81b7c37a708ebc52caf0bae7c534826bf39494acd5130829cd52f15733a4c9afd67c9a4"}]}}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x88, 0x6, '\x00', [@ra={0x5, 0x2, 0x7}, @generic={0x0, 0x6, "af8679fa06fe"}, @enc_lim={0x4, 0x1, 0x46}, @jumbo={0xc2, 0x4, 0xfffffff7}, @jumbo={0xc2, 0x4, 0xe47}, @enc_lim, @generic={0x3f, 0x11, "83ea4a43a2e2ccaf2e46dda208888418eb"}, @jumbo={0xc2, 0x4, 0x3}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x13d2a5fd76930bba}}}, @rthdrdstopts={{0x88, 0x29, 0x37, {0x6, 0xd, '\x00', [@ra={0x5, 0x2, 0x8b}, @enc_lim, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x34}}, @jumbo={0xc2, 0x4, 0x84}, @calipso={0x7, 0x30, {0x3, 0xa, 0xac, 0x7ff, [0x8, 0x0, 0x3ff, 0xfffffffffffff329, 0x3]}}, @pad1, @calipso={0x7, 0x10, {0x3, 0x2, 0xe3, 0x7, [0x374]}}, @padn={0x1, 0x1, [0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}], 0x230}}, {{0x0, 0x0, &(0x7f0000005740)=[{&(0x7f0000005540)="cbe5d60c0c48f36965fd9189fa642bb1ff018d3b32d17ddd5efd357a4f355b1800ed2a8e58ac262a741bad578c9cdfb126cd68865388ebd8b9aaab965a13fd0afc2aa320a53b2eb2a25f7ccddf0394b9ee43cb583550c0971a24cf60aac30b9eb8654bd07551fe4b3ec96b8e183a20a652a25d41a3a346cdbbfc22ebf4be2648c3f0342b3c8a1412edf01d02ba57e5526fb025c5435c47ff1149453f1bfa7cc6d2c20dae17d2b1e9b9f80b87652510c42f3118618d826161e9e8c0af57a723dee7bdf94e4b8d38044bfbba1dccb704d10df3f0f4270168a67ac36090db7fa5c3887ff8abeb92c4", 0xe7}, {&(0x7f0000005640)="d27c32dd294f8435820b644b0e0f44dc709bb22bb1836e01a9ad89dda977743d44f29324512119022fa391a3adcf0f22b8708ae997b675e3f3adc88680bfc55aac9e358bdec16179177137b61a2752234cbd307317b4c6b7dcd57c53073bcd5bfa4212412c48e3b1b49c96148f9a7bd2", 0x70}, {&(0x7f00000056c0)="81dc407a99fce6d56df7c982e0517e6c583f5fe6de248419c01f4f7bc06641bd2dad5af2eca0c50a4786b944fae429b367ff4b7540e9c4f7bfa78e189c7796fcc0563dd5aec97c69d431b35d905772248aa4abcd7ca9fd3496a1f6a160498aaf242ee8e6f5", 0x65}], 0x3}}], 0x5, 0x20000000)
vmsplice(r5, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
ioctl$BLKREPORTZONE(r5, 0xc0101282, &(0x7f0000000240)={0x4, 0x1, 0x0, [{0xfffffffffffffff7, 0xfffffffffffffeff, 0x7, 0x1, 0xda, 0x78, 0x8}]})
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cgroups\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x7, 0x400, 0x8})
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:02 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd=r3, 0x7ff, &(0x7f0000000240)=[{&(0x7f0000000340)=""/151, 0x97}, {&(0x7f00000000c0)=""/19, 0x13}, {&(0x7f0000000400)=""/188, 0xbc}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/54, 0x36}, {&(0x7f00000014c0)=""/214, 0xd6}, {&(0x7f00000015c0)=""/191, 0xbf}, {&(0x7f0000001680)=""/240, 0xf0}], 0x8, 0x11, 0x97ec9491dae0b145, {0x0, r4}}, 0xfffffffd)
close(r3)
r5 = syz_open_dev$vcsn(&(0x7f0000000080), 0x2bc, 0x100)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r7 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r8=>0x0, &(0x7f0000000140))
r9 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000002a40))
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0xa, 0x0, r10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x9, 0x0, 0x9, 0x0, 0x0, {0x0, r10}}, 0x7)
syz_io_uring_submit(r8, r2, &(0x7f0000001b40)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r5, 0x0, &(0x7f0000001b00)={&(0x7f00000017c0)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001840)="6bb53709087faa771a15bd26d7c08a1fef6931f2c46555acbfec22c9c203952025d19c6451895c2cf13503266f824a5d71fbb61e79483a86d9da94a78bfc67cbac32ae7ef8d388ab08d8f41a2045534c725203051e637bd5ce8afcbc232e5fbf13a09dcde5", 0x65}, {&(0x7f0000001e00)="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", 0x1000}], 0x2, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x1e0}, 0x0, 0x1, 0x1, {0x0, r10}}, 0x8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0)
io_uring_enter(r7, 0x58ab, 0x0, 0x0, 0x0, 0x0)
fsetxattr(r7, &(0x7f00000001c0)=@known='trusted.overlay.metacopy\x00', &(0x7f0000001780)='/dev/full\x00', 0xa, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:02 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20000000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x30, r0, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
pidfd_getfd(r6, r5, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0xd, 0xff, 0x2, 0x0, 0x8, 0x4080, 0xd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x66211a2bf623d44c, @perf_bp={&(0x7f0000000040), 0x1}, 0x1040, 0x80, 0xdd8, 0x0, 0x2, 0x71b, 0x4, 0x0, 0x800, 0x0, 0xa52}, 0x0, 0xa, r5, 0x9)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:02 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x80085502, 0x20000000)

07:17:02 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:02 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x9607, 0x2, 0x0, 0x20000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:02 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:17 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x200042, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
memfd_create(&(0x7f0000000000)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x4)
lseek(r2, 0x70000000, 0x2)
syz_usb_connect$cdc_ecm(0x1, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0xc, 0xd0, 0x3, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x81, {{0xa, 0x24, 0x6, 0x0, 0x0, "f5d32a7bab"}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x1c4c, 0x9, 0x1000, 0x6}, [@obex={0x5, 0x24, 0x15, 0xfff}, @acm={0x4, 0x24, 0x2, 0x4}, @obex={0x5, 0x24, 0x15, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x4, 0x3f}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x80, 0x1b, 0xef}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x5, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0x1, 0x3}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x4, 0x75, 0x0, 0x10, 0xff}, 0x30, &(0x7f0000000140)={0x5, 0xf, 0x30, 0x4, [@wireless={0xb, 0x10, 0x1, 0x0, 0xc, 0x40, 0x3f, 0x40}, @wireless={0xb, 0x10, 0x1, 0x2, 0x28, 0x28, 0x40, 0x9, 0x81}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x20, 0x1, 0x4, 0x4a}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x20, 0x3, 0xa0}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x180a}}]})
fallocate(r0, 0x27, 0x0, 0x2979a4e5)
ioctl$HIDIOCINITREPORT(r1, 0xc0085504, 0x20000000)

07:17:17 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)
io_uring_setup(0x2aa6, &(0x7f0000000240)={0x0, 0xeaa1, 0x20, 0x2, 0x2c6})
io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r6 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0)
io_uring_enter(r6, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x3bfa, &(0x7f0000000080)={0x0, 0xa1e2, 0x0, 0x0, 0x174, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:17 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0)
r1 = dup2(r0, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x80085502, 0x20000000)

07:17:17 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_setup(0x6b45, &(0x7f0000000080)={0x0, 0xdc3, 0x20, 0x2, 0x327, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0))
syz_io_uring_submit(r3, r2, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x8, 0x5, 0x0, 0x80000000, 0x5}, 0x3)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0)
close(r4)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r6 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0)
io_uring_enter(r6, 0x58ab, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:17 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:17 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0)
io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0)
fcntl$dupfd(r4, 0x0, r3)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r5 = getpgrp(0x0)
pidfd_open(r5, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r7=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:17 executing program 7:
r0 = syz_io_uring_setup(0x4c43, &(0x7f00000002c0)={0x0, 0x0, 0x19}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r3, 0x0}, 0x8001)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000180)={0x7, 0x28, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0]})
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:17 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0)

[ 1737.587908] udc-core: couldn't find an available UDC or it's busy
[ 1737.588653] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:17:18 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x20400, 0x4c)
renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', r4, &(0x7f00000001c0)='./file0\x00', 0x0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080))
r5 = getpgrp(0x0)
pidfd_open(r5, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:18 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x4, 0x2004, @fd_index, 0x400000000000, &(0x7f0000000280)="a871b3c099be2bc32b14c91bd8c17184e2b9386d1941463187616d05e4e9b9d4bc2b8559c00bc5d11bee229342d9f7a298b47249e40e4be6a5e3c516b28f0b1e3c8d9710b52a8526397857ff26861a3b65f22422ebac9e6fe6422c7a4b05f8be0adbc05200df46d72cdb5ce53567ce84eb240a235d40f7e92c195f0cf9c91bb4a6c23bc7104bcc2ccbac8e508223926c340fc32ed0cc7726818efe81e49155be1811b2440d9414f534b18a15db17589fb3b7a2c2d3", 0xb5}, 0xa99)
r5 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000002a40))
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x9, 0x0, 0x9, 0x0, 0x0, {0x0, r6}}, 0x7)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x8, 0x6, 0xfff, 0x9de, 0x8, 0x0, {0x3, r6}}, 0x2882)
pidfd_open(r4, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={<r8=>0x0, <r9=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000080)={<r10=>r0, 0xe845, 0x800, 0x4})
dup(r10)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r9, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:18 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:18 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r5=>0x0}, 0x0)
getpeername(r5, &(0x7f0000000080)=@phonet, &(0x7f0000000180)=0x80)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0)
r9 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000)
r10 = socket$inet6_icmp(0xa, 0x2, 0x3a)
syz_io_uring_submit(r6, r9, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r10, 0x80, &(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}}, 0x1000)

07:17:18 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x6000, 0x0, 0x0, 0x0)

07:17:18 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x8}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
sendfile(r3, r3, &(0x7f0000000080)=0x7fffffff, 0x9)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x4e85, 0x0, 0x0, 0x0, 0x0)

07:17:18 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:18 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ea, 0x4000, 0x2, 0x0, 0x0)

07:17:18 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, 0x0, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:18 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0)
io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x10010, r4, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r3, 0x8000000)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x1, 0x0, 0x0, {0x0, r6}}, 0x8)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r7 = getpgrp(0x0)
pidfd_open(r7, 0x0)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r9=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:31 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800005e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
r6 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0)
io_uring_enter(r6, 0x58ab, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r6, 0x6361, 0x6ae6, 0x0, &(0x7f0000000080)={[0x9]}, 0x8)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:31 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(0xffffffffffffffff, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x80085502, 0x20000000)

07:17:31 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0)
r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0)
syz_io_uring_submit(r8, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
pipe2(&(0x7f0000000000)={0x0, <r9=>0x0}, 0x0)
vmsplice(r9, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r9, 0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x12345}, 0x2c7)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r10 = dup2(r0, r0)
r11 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r11, 0x0)
ioctl$HIDIOCINITREPORT(r10, 0xc0085504, 0x20000000)

07:17:31 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000080)=<r5=>0x0)
ptrace$peek(0x1, r5, &(0x7f00000000c0))
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r7=>0x0}, 0x100800)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:31 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, 0x0, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:31 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
io_uring_enter(r3, 0x5768, 0x6653, 0x2, &(0x7f0000000080)={[0x8]}, 0x8)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:31 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x600000, 0x0, 0x0, 0x0)

07:17:31 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x80)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=<r6=>0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0)
syz_io_uring_setup(0x7bf4, &(0x7f00000001c0)={0x0, 0x319, 0x8, 0x2, 0x32c}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000240)=<r7=>0x0)
r8 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3df}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000380), &(0x7f0000002a40))
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, r9)
syz_io_uring_submit(0x0, r7, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x4, 0x2004, @fd_index, 0x400000000000, &(0x7f0000000280)="a871b3c099be2bc32b14c91bd8c17184e2b9386d1941463187616d05e4e9b9d4bc2b8559c00bc5d11bee229342d9f7a298b47249e40e4be6a5e3c516b28f0b1e3c8d9710b52a8526397857ff26861a3b65f22422ebac9e6fe6422c7a4b05f8be0adbc05200df46d72cdb5ce53567ce84eb240a235d40f7e92c195f0cf9c91bb4a6c23bc7104bcc2ccbac8e508223926c340fc32ed0cc7726818efe81e49155be1811b2440d9414f534b18a15db17589fb3b7a2c2d3", 0xb5, 0x0, 0x0, {0x0, r9}}, 0xa99)
syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x420080, 0x23456, {0x0, r9}}, 0x1f)
io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r5, 0x2831, 0x5968, 0x3, &(0x7f00000000c0)={[0x800000000008]}, 0x8)

[ 1751.533885] udc-core: couldn't find an available UDC or it's busy
[ 1751.534695] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[ 1751.546600] udc-core: couldn't find an available UDC or it's busy
[ 1751.547422] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:17:46 executing program 5:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0)

07:17:46 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0)
syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r8 = syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x4007, @fd=r8, 0x1000, 0x1000, 0x10000, 0x2, 0x1, {0x1}}, 0x5)
r9 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x18000, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r0}, 0x0)
close(r9)
r10 = getpgrp(0x0)
pidfd_open(r10, 0x0)
r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r12 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x600000, 0x0)
pidfd_getfd(r12, r8, 0x0)

07:17:46 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index=0x7}, 0x0)
close(r3)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r6=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r7 = memfd_create(&(0x7f0000000480)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xf7\x8dQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n\xe85e.\fyV\xa7\xe0\x82\x9bx\xe0\x9a\xd9\x18=\xd5kc\xfdu\xbe\xfb\x9f\xa7^\x90\xaf*%\xa2\xa8D\xabo\x99C\xe5\xb5\xc2\fc\xe2\n\xca\xa6X\xbfv\x1b\xa8\x90\xd2\xd8\xc9\f\xc0\xbf\x14\x1a\x14\xb5pO\x84a\xb4\xcc\x88\x03>r\xfc\xe8\xf2\xb9\x80aZ\x06\x000\xba\xe5\xde\xfd\xce\xa2\x1dWR\xae\x7f\xa6\xac\xf1\xa52F\xa64\x87v\xfdRp;\x10\xeah@,\xe5l\xaa1\xf3W\xd5\xa6\xf7k\xe4M\xc1M\xf3\xc9\xed\xab\x1b\xa6\x8c\xbe^\x95\x85PN\xba\b\x90VR\xf4\xb1q^\xf7 \xcb5!\xd4\xc4\"\x80\n\xac\xc5\xaa|\xa9b\xdc\b\xa1\xa9\x10\x8b\xad\xaa\xb06FP\x8bF\x15E\x11\xed9\xfd\x9b\xec6\x0f\xbfXs\x99K\xa0N\xd2\xf3g\xb5\xf2', 0x5)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r7, 0x0)
syz_io_uring_setup(0x6b91, &(0x7f0000000400)={0x0, 0x31a, 0x8, 0x0, 0x32c}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000240)=<r8=>0x0)
r9 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3df}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000380), &(0x7f0000002a40))
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0xa, 0x0, r10)
syz_io_uring_submit(0x0, r8, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x4, 0x2004, @fd_index, 0x400000000000, &(0x7f0000000280)="a871b3c099be2bc32b14c91bd8c17184e2b9386d1941463187616d05e4e9b9d4bc2b8559c00bc5d11bee229342d9f7a298b47249e40e4be6a5e3c516b28f0b1e3c8d9710b52a8526397857ff26861a3b65f22422ebac9e6fe6422c7a4b05f8be0adbc05200df46d72cdb5ce53567ce84eb240a235d40f7e92c195f0cf9c91bb4a6c23bc7104bcc2ccbac8e508223926c340fc32ed0cc7726818efe81e49155be1811b2440d9414f534b18a15db17589fb3b7a2c2d3", 0xb5, 0x0, 0x0, {0x0, r10}}, 0xa99)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x5, 0x2007, @fd=r7, 0x9, &(0x7f0000000340)="d34d746cbf2175803af46846cd25a9dfd45b396aa28945b72c89d383d70775d547acf3e3f42973b25e7906af62990f5c5f330665f9a3a47238f817422c517b5ebf918e9b7c6cf8472c926a3920b33e651308d549024004a3c4fcbff9d485c7b65aff78bcd7c05f6050cfbd36f8c0c5e7c537b641cd7989c965784624b78557aa3a2b12020c5a94751478c48066076e4b91f4a6e20cdfc718089682a3485af10df088d0b0f0a0", 0xa6, 0x8, 0x1, {0x0, r10}}, 0x8)

07:17:46 executing program 1:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = clone3(0x0, 0x0)
r7 = fcntl$getown(r5, 0x9)
clone3(&(0x7f00000006c0)={0x100000100, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0x3b}, &(0x7f00000004c0)=""/213, 0xd5, &(0x7f00000005c0)=""/172, &(0x7f0000000680)=[r6, r7], 0x2}, 0x58)
r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
pidfd_getfd(r9, r8, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x2, 0x1, 0xec, 0x23, 0x0, 0x3, 0x6284, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_bp={&(0x7f0000000080), 0xd}, 0x2000, 0x7ff, 0x10001, 0x9, 0xffffffff80000001, 0x2, 0x3, 0x0, 0x4}, r6, 0xf, r8, 0x9)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:46 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x4004, @fd_index=0xffffffff, 0xd2, &(0x7f0000000340)=""/179, 0xb3, 0x3, 0x1}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000080)={0x0, 0x0}, 0x800)
perf_event_open(&(0x7f0000001d80)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '\x00'}], 0xa, "e8b56c311c5c8acf6b2046d25700c7acc0f0f406431f595070c94276f3ad70aae990458c75"}, 0x32)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:46 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r1 = dup2(0xffffffffffffffff, r0)
r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0)
ioctl$HIDIOCINITREPORT(r1, 0x80085502, 0x20000000)

07:17:46 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x13, 0x98, 0xff, 0x2, 0x0, 0x1, 0xd9080, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x51, 0x800}, 0x40c40, 0x8c, 0x3c50aa94, 0x7, 0x7, 0x2, 0x9, 0x0, 0x3, 0x0, 0x8}, 0x0, 0x2, 0xffffffffffffffff, 0x8)
r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x80100)
close_range(r2, r2, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0)
r3 = dup2(r0, r0)
r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r4, 0x0)
ioctl$HIDIOCINITREPORT(r3, 0xc0085504, 0x20000000)

[ 1766.018067] udc-core: couldn't find an available UDC or it's busy
[ 1766.018886] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:17:46 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, 0x0, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:17:46 executing program 0:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(0xffffffffffffffff)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1766.080949] udc-core: couldn't find an available UDC or it's busy
[ 1766.082365] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
07:17:46 executing program 7:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_setup(0x7bf4, &(0x7f00000001c0)={0x0, 0x319, 0x8, 0x2, 0x32c}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000240)=<r4=>0x0)
r5 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3df}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000380), &(0x7f0000002a40))
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6)
syz_io_uring_submit(0x0, r4, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x4, 0x2004, @fd_index, 0x400000000000, &(0x7f0000000280)="a871b3c099be2bc32b14c91bd8c17184e2b9386d1941463187616d05e4e9b9d4bc2b8559c00bc5d11bee229342d9f7a298b47249e40e4be6a5e3c516b28f0b1e3c8d9710b52a8526397857ff26861a3b65f22422ebac9e6fe6422c7a4b05f8be0adbc05200df46d72cdb5ce53567ce84eb240a235d40f7e92c195f0cf9c91bb4a6c23bc7104bcc2ccbac8e508223926c340fc32ed0cc7726818efe81e49155be1811b2440d9414f534b18a15db17589fb3b7a2c2d3", 0xb5, 0x0, 0x0, {0x0, r6}}, 0xa99)
r7 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000002a40))
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x8a7, 0x0, &(0x7f0000000000)="a756a745a597d2862218", 0x2, 0x0, 0x0, {0x2, r8}}, 0x0)
mount$cgroup2(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x810000, &(0x7f0000000180)={[{@memory_recursiveprot}]})
close(r3)
r9 = getpgrp(0x0)
pidfd_open(r9, 0x0)
r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1785.083566] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[ 1785.086498] CPU: 0 PID: 256 Comm: syz-fuzzer Not tainted 5.10.180 #1
[ 1785.088005] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1785.089898] Call Trace:
[ 1785.090550]  dump_stack+0x107/0x167
[ 1785.091419]  dump_header+0x106/0x65e
[ 1785.092321]  oom_kill_process.cold+0x10/0x15
[ 1785.093356]  out_of_memory+0x1149/0x1440
[ 1785.094357]  ? oom_killer_disable+0x280/0x280
[ 1785.095411]  ? mutex_trylock+0x237/0x2b0
[ 1785.096379]  ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130
[ 1785.097773]  __alloc_pages_slowpath.constprop.0+0x1b25/0x2130
[ 1785.099160]  ? lock_acquire+0xd7/0x470
[ 1785.100088]  ? warn_alloc+0x190/0x190
[ 1785.101032]  __alloc_pages_nodemask+0x51d/0x600
[ 1785.102152]  ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130
[ 1785.103555]  ? find_get_entry+0x2c8/0x740
[ 1785.104552]  alloc_pages_current+0x187/0x280
[ 1785.105586]  __page_cache_alloc+0x2d2/0x360
[ 1785.106621]  pagecache_get_page+0x2c7/0xc80
[ 1785.107656]  filemap_fault+0x177d/0x2210
[ 1785.108626]  ? read_cache_page_gfp+0x30/0x30
[ 1785.109662]  ? replace_page_cache_page+0x1200/0x1200
[ 1785.110863]  ? count_memcg_event_mm.part.0+0x10f/0x2f0
[ 1785.112093]  ext4_filemap_fault+0x87/0xc0
[ 1785.113069]  __do_fault+0x113/0x410
[ 1785.113930]  handle_mm_fault+0x1e72/0x3520
[ 1785.114944]  ? _copy_from_user+0xfb/0x1b0
[ 1785.115928]  ? __pmd_alloc+0x5e0/0x5e0
[ 1785.116856]  ? vmacache_find+0x55/0x2a0
[ 1785.117787]  ? vmacache_update+0xce/0x140
[ 1785.118781]  do_user_addr_fault+0x56e/0xc60
[ 1785.119812]  exc_page_fault+0xa2/0x1a0
[ 1785.120729]  ? asm_exc_page_fault+0x8/0x30
[ 1785.121721]  asm_exc_page_fault+0x1e/0x30
[ 1785.122688] RIP: 0033:0x466533
[ 1785.123443] Code: Unable to access opcode bytes at RIP 0x466509.
[ 1785.124840] RSP: 002b:000000c00003fe80 EFLAGS: 00010202
[ 1785.126087] RAX: ffffffffffffff92 RBX: 000000003b971220 RCX: 0000000000466533
[ 1785.127737] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001f20e78
[ 1785.129386] RBP: 000000c00003fec8 R08: 0000000000000000 R09: 0000000000000000
[ 1785.131056] R10: 000000c00003feb8 R11: 0000000000000202 R12: 0000000000438880
[ 1785.132700] R13: 0000000000000000 R14: 0000000000e5de2c R15: 0000000000000000
[ 1785.134490] Mem-Info:
[ 1785.135137] active_anon:25302 inactive_anon:57499 isolated_anon:0
[ 1785.135137]  active_file:2 inactive_file:6 isolated_file:0
[ 1785.135137]  unevictable:0 dirty:0 writeback:0
[ 1785.135137]  slab_reclaimable:8459 slab_unreclaimable:244366
[ 1785.135137]  mapped:69634 shmem:102 pagetables:1815 bounce:0
[ 1785.135137]  free:2865 free_pcp:50 free_cma:0
[ 1785.142342] Node 0 active_anon:101208kB inactive_anon:229996kB active_file:8kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:408kB writeback_tmp:0kB kernel_stack:4480kB all_unreclaimable? yes
[ 1785.147577] Node 0 DMA free:6500kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1785.153624] lowmem_reserve[]: 0 1616 1616 1616
[ 1785.154798] Node 0 DMA32 free:4960kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:101208kB inactive_anon:229996kB active_file:8kB inactive_file:24kB unevictable:0kB writepending:0kB present:2080640kB managed:1660512kB mlocked:0kB pagetables:7260kB bounce:0kB free_pcp:200kB local_pcp:0kB free_cma:0kB
[ 1785.160791] lowmem_reserve[]: 0 0 0 0
[ 1785.161687] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6500kB
[ 1785.164793] Node 0 DMA32: 486*4kB (UME) 183*8kB (UME) 53*16kB (UME) 16*32kB (UM) 3*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4960kB
[ 1785.168261] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1785.170222] 110 total pagecache pages
[ 1785.171098] 0 pages in swap cache
[ 1785.171929] Swap cache stats: add 0, delete 0, find 0/0
[ 1785.173173] Free swap  = 0kB
[ 1785.173795] Total swap = 0kB
[ 1785.174454] 524158 pages RAM
[ 1785.175086] 0 pages HighMem/MovableOnly
[ 1785.175940] 105053 pages reserved
[ 1785.176827] Unreclaimable slab info:
[ 1785.178172] Name                      Used          Total
[ 1785.179455] pid_2                     78KB         78KB
[ 1785.180645] IEEE-802.15.4-MAC         31KB         31KB
[ 1785.181783] IEEE-802.15.4-RAW         31KB         31KB
[ 1785.182952] p9_req_t                   8KB          8KB
[ 1785.184189] ip6-frags                 15KB         15KB
[ 1785.185440] fib6_nodes                28KB         28KB
[ 1785.186706] ip6_dst_cache             41KB         41KB
[ 1785.187957] PINGv6                    63KB         63KB
[ 1785.189212] RAWv6                    220KB        220KB
[ 1785.190496] UDPLITEv6                 62KB         62KB
[ 1785.191748] UDPv6                     62KB         62KB
[ 1785.193000] tw_sock_TCPv6              7KB          7KB
[ 1785.194257] TCPv6                     62KB         62KB
[ 1785.195514] scsi_sense_cache           8KB          8KB
[ 1785.196769] sd_ext_cdb                 3KB          3KB
[ 1785.198017] virtio_scsi_cmd           16KB         16KB
[ 1785.199304] sgpool-128                59KB         59KB
[ 1785.200559] sgpool-64                 63KB         63KB
[ 1785.201810] sgpool-32                 47KB         47KB
[ 1785.203072] sgpool-16                 45KB         45KB
[ 1785.204323] sgpool-8                  45KB         45KB
[ 1785.205659] io_kiocb                 866KB       1605KB
[ 1785.206915] mqueue_inode_cache         62KB         62KB
[ 1785.208185] nfs_commit_data           15KB         15KB
[ 1785.209432] nfs_write_data            47KB         47KB
[ 1785.210707] jbd2_inode                11KB         11KB
[ 1785.211956] ext4_system_zone           7KB          7KB
[ 1785.213206] ext4_io_end_vec            7KB          7KB
[ 1785.214467] ext4_bio_post_read_ctx         15KB         15KB
[ 1785.215814] kioctx                    31KB         31KB
[ 1785.217062] aio_kiocb                  7KB          7KB
[ 1785.218330] dnotify_mark               3KB          3KB
[ 1785.219581] dnotify_struct             3KB          3KB
[ 1785.220838] dio                       30KB         30KB
[ 1785.222096] bio-2                      4KB          4KB
[ 1785.223378] fasync_cache               3KB          3KB
[ 1785.224636] pid_namespace              7KB          7KB
[ 1785.225896] posix_timers_cache          7KB          7KB
[ 1785.227222] rpc_buffers               31KB         31KB
[ 1785.228509] rpc_tasks                  3KB          3KB
[ 1785.229779] UNIX                     323KB        372KB
[ 1785.231078] UDP-Lite                  63KB         63KB
[ 1785.232394] tcp_bind_bucket            8KB          8KB
[ 1785.233765] ip_fib_trie                8KB          8KB
[ 1785.235044] ip_fib_alias              15KB         15KB
[ 1785.236476] ip_dst_cache              75KB        104KB
[ 1785.237713] PING                      62KB         62KB
[ 1785.238977] RAW                      125KB        125KB
[ 1785.240221] UDP                      222KB        283KB
[ 1785.241468] tw_sock_TCP                7KB          7KB
[ 1785.242750] request_sock_TCP          15KB         15KB
[ 1785.243990] TCP                       60KB         60KB
[ 1785.245238] hugetlbfs_inode_cache         30KB         30KB
[ 1785.246580] bio-1                     11KB         11KB
[ 1785.247823] eventpoll_pwq             23KB         23KB
[ 1785.249061] eventpoll_epi             43KB         43KB
[ 1785.250338] inotify_inode_mark         46KB         46KB
[ 1785.251595] request_queue             60KB         60KB
[ 1785.252834] blkdev_ioc                18KB         18KB
[ 1785.254098] bio-0                     72KB         88KB
[ 1785.255365] biovec-max               514KB        565KB
[ 1785.256611] biovec-64                126KB        173KB
[ 1785.257843] biovec-16                 37KB         37KB
[ 1785.259101] user_namespace            31KB         31KB
[ 1785.260350] uid_cache                  8KB          8KB
[ 1785.261587] dmaengine-unmap-2          4KB          4KB
[ 1785.262844] audit_buffer               7KB          7KB
[ 1785.264100] skbuff_fclone_cache         67KB         67KB
[ 1785.265384] skbuff_head_cache         68KB         78KB
[ 1785.266664] file_lock_cache           66KB         66KB
[ 1785.267904] file_lock_ctx              7KB          7KB
[ 1785.269219] fsnotify_mark_connector         24KB         24KB
[ 1785.270620] net_namespace            115KB        115KB
[ 1785.271857] task_delay_info          115KB        115KB
[ 1785.273113] taskstats                 84KB         84KB
[ 1785.274400] proc_dir_entry           363KB        393KB
[ 1785.275651] pde_opener                47KB         47KB
[ 1785.276886] seq_file                  56KB         56KB
[ 1785.278138] sigqueue                  94KB         94KB
[ 1785.279420] shmem_inode_cache       1260KB       1415KB
[ 1785.280658] kernfs_iattrs_cache        243KB        243KB
[ 1785.281936] kernfs_node_cache       5365KB       5407KB
[ 1785.283218] mnt_cache                228KB        228KB
[ 1785.284506] filp                    1560KB       2092KB
[ 1785.285778] names_cache            10115KB      12405KB
[ 1785.287032] hashtab_node             274KB        274KB
[ 1785.288303] ebitmap_node            1153KB       1153KB
[ 1785.289548] avtab_node              4976KB       4976KB
[ 1785.290806] avc_node                  31KB         31KB
[ 1785.292043] lsm_inode_cache         3265KB       3316KB
[ 1785.293336] lsm_file_cache           155KB        192KB
[ 1785.294585] key_jar                   31KB         31KB
[ 1785.295829] uts_namespace             15KB         15KB
[ 1785.297056] nsproxy                   11KB         11KB
[ 1785.298372] vm_area_struct          1114KB       1408KB
[ 1785.299612] mm_struct                234KB        409KB
[ 1785.300851] fs_cache                  53KB         60KB
[ 1785.302114] files_cache              188KB        223KB
[ 1785.303385] signal_cache             339KB        432KB
[ 1785.304822] sighand_cache            393KB        420KB
[ 1785.306383] task_struct             1332KB       1706KB
[ 1785.307924] cred_jar                 113KB        168KB
[ 1785.309470] anon_vma_chain           317KB        354KB
[ 1785.310947] anon_vma                 264KB        298KB
[ 1785.312215] pid                       54KB         82KB
[ 1785.313451] Acpi-Operand             125KB        154KB
[ 1785.314696] Acpi-ParseExt             23KB         23KB
[ 1785.315946] Acpi-Parse                23KB         39KB
[ 1785.317190] Acpi-State               157KB        173KB
[ 1785.318451] Acpi-Namespace            24KB         24KB
[ 1785.319712] numa_policy                7KB          7KB
[ 1785.320944] trace_event_file         163KB        163KB
[ 1785.322203] ftrace_event_field        280KB        280KB
[ 1785.323475] pool_workqueue            32KB         32KB
[ 1785.324711] task_group                16KB         16KB
[ 1785.325938] vmap_area                559KB        559KB
[ 1785.327241] page->ptl                294KB        322KB
[ 1785.328496] kmemleak_scan_area        282KB        282KB
[ 1785.329763] kmemleak_object       745121KB     745121KB
[ 1785.331025] kmalloc-8k              4576KB       4736KB
[ 1785.332292] kmalloc-4k              6976KB       7584KB
[ 1785.333543] kmalloc-2k              4300KB       4928KB
[ 1785.334803] kmalloc-1k              2158KB       3040KB
[ 1785.336042] kmalloc-512            25943KB      26080KB
[ 1785.337306] kmalloc-256             1216KB       1264KB
[ 1785.338589] kmalloc-192              478KB        492KB
[ 1785.339860] kmalloc-128              532KB        556KB
[ 1785.341189] kmalloc-96               697KB       1580KB
[ 1785.342471] kmalloc-64               877KB       1244KB
[ 1785.343714] kmalloc-32             88520KB      88520KB
[ 1785.344951] kmalloc-16               333KB        368KB
[ 1785.346231] kmalloc-8                297KB        330KB
[ 1785.347482] kmem_cache_node           47KB         47KB
[ 1785.348718] kmem_cache                75KB         75KB
[ 1785.349953] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=256,uid=0
[ 1785.355215] Out of memory (oom_kill_allocating_task): Killed process 255 (syz-fuzzer) total-vm:1240596kB, anon-rss:294896kB, file-rss:136kB, shmem-rss:0kB, UID:0 pgtables:932kB oom_score_adj:0
[ 1786.935880] oom_reaper: reaped process 11161 (syz-executor.7), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB

VM DIAGNOSIS:
07:18:04  Registers:
info registers vcpu 0
RAX=0000000000000058 RBX=0000000000000058 RCX=ffffffff81f2e0d3 RDX=00000000000001f2
RSI=ffffffff81f2e0e1 RDI=0000000000000007 RBP=00000000000101f2 RSP=ffff888015247098
R8 =0000000000000000 R9 =0000000000006d2c R10=0000000000010000 R11=0000000000000001
R12=ffff88800f658058 R13=ffff88800f658050 R14=ffff88800f658048 R15=ffff88800f658060
RIP=ffffffff81f2e0e7 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fd249f9a900 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd24962cff8 CR3=000000001594a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=3d3d3d3d3d3d3d3d3d3d3d3d3d3d3d3d XMM01=00000000000000000000000000000000
XMM02=ffffffffffffffffffffffffffffffff XMM03=2f6c616e72756f6a2f676f6c2f6e7572
XMM04=2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e XMM05=00000000000000000000000000000000
XMM06=72093a6c69615f70425f636365530a30 XMM07=00000000000000000000000000000000
XMM08=415453454d49545f454d49544c414552 XMM09=00000000000000000000000000000000
XMM10=20202020200000000000000020000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff815f6d0f RDX=ffff88800e968000
RSI=ffffffff815f6d1c RDI=0000000000000001 RBP=ffffea0001117600 RSP=ffff88804532f9e0
R8 =0000000000000000 R9 =ffff88800e968007 R10=0000000000000000 R11=0000000000000001
R12=ffff88804532fce0 R13=ffff88804523fb50 R14=dffffc0000000000 R15=00007f7f8dd6b000
RIP=ffffffff815f6d1c RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f63b0ead030 CR3=0000000040558000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000ff0000 XMM01=25252525252525252525252525252525
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=00000000000000000000000000ff0000 XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000