144018] ? ksys_write+0x1a9/0x260 [ 1839.144417] ? __ia32_sys_read+0xb0/0xb0 [ 1839.144837] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1839.145385] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1839.145946] do_syscall_64+0x33/0x40 [ 1839.146333] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1839.146870] RIP: 0033:0x7effa61f4b19 [ 1839.147256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1839.149179] RSP: 002b:00007effa376a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1839.149987] RAX: ffffffffffffffda RBX: 00007effa6307f60 RCX: 00007effa61f4b19 [ 1839.150725] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1839.151465] RBP: 00007effa376a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1839.152208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1839.152943] R13: 00007ffd0f4a831f R14: 00007effa376a300 R15: 0000000000022000 [ 1839.166796] FAULT_INJECTION: forcing a failure. [ 1839.166796] name failslab, interval 1, probability 0, space 0, times 0 [ 1839.167968] CPU: 1 PID: 9738 Comm: syz-executor.4 Not tainted 5.10.181 #1 [ 1839.168639] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1839.169450] Call Trace: [ 1839.169720] dump_stack+0x107/0x167 [ 1839.170086] should_fail.cold+0x5/0xa [ 1839.170460] ? __io_queue_sqe+0x666/0x9d0 [ 1839.170869] should_failslab+0x5/0x20 [ 1839.171280] kmem_cache_alloc_trace+0x55/0x320 [ 1839.171731] __io_queue_sqe+0x666/0x9d0 [ 1839.172128] ? io_issue_sqe+0x7660/0x7660 [ 1839.172540] ? io_prep_rw+0x7f5/0x1050 [ 1839.172928] io_submit_sqes+0x4461/0x85c0 [ 1839.173373] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1839.173881] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1839.174360] ? lock_downgrade+0x6d0/0x6d0 [ 1839.174769] ? find_held_lock+0x2c/0x110 [ 1839.175175] ? io_submit_sqes+0x85c0/0x85c0 [ 1839.175606] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1839.176083] ? wait_for_completion_io+0x270/0x270 [ 1839.176563] ? rcu_read_lock_any_held+0x75/0xa0 [ 1839.177021] ? vfs_write+0x354/0xa70 [ 1839.177411] ? fput_many+0x2f/0x1a0 [ 1839.177771] ? ksys_write+0x1a9/0x260 [ 1839.178179] ? __ia32_sys_read+0xb0/0xb0 [ 1839.178583] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1839.179136] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1839.179682] do_syscall_64+0x33/0x40 [ 1839.180052] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1839.180592] RIP: 0033:0x7fae80968b19 [ 1839.180990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1839.182926] RSP: 002b:00007fae7dede188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1839.183675] RAX: ffffffffffffffda RBX: 00007fae80a7bf60 RCX: 00007fae80968b19 [ 1839.184381] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1839.185083] RBP: 00007fae7dede1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1839.185786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1839.186584] R13: 00007fffa57e443f R14: 00007fae7dede300 R15: 0000000000022000 14:54:56 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:54:56 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 14:54:56 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x6, 0x0, 0x0, 0x0) 14:54:56 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:54:56 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 58) 14:54:57 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1839.542032] FAULT_INJECTION: forcing a failure. [ 1839.542032] name failslab, interval 1, probability 0, space 0, times 0 [ 1839.543306] CPU: 1 PID: 9761 Comm: syz-executor.6 Not tainted 5.10.181 #1 [ 1839.544004] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1839.544888] Call Trace: [ 1839.545184] dump_stack+0x107/0x167 [ 1839.545564] should_fail.cold+0x5/0xa [ 1839.545969] ? create_object.isra.0+0x3a/0xa20 [ 1839.546469] should_failslab+0x5/0x20 [ 1839.546868] kmem_cache_alloc+0x5b/0x310 [ 1839.547306] ? mark_held_locks+0x9e/0xe0 [ 1839.547727] create_object.isra.0+0x3a/0xa20 [ 1839.548205] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1839.548718] kmem_cache_alloc_bulk+0x168/0x320 [ 1839.549194] io_submit_sqes+0x6f76/0x85c0 [ 1839.549628] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1839.550158] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1839.550673] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1839.551194] ? lock_downgrade+0x6d0/0x6d0 [ 1839.551627] ? find_held_lock+0x2c/0x110 [ 1839.552088] ? io_submit_sqes+0x85c0/0x85c0 [ 1839.552546] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1839.553052] ? wait_for_completion_io+0x270/0x270 [ 1839.553556] ? rcu_read_lock_any_held+0x75/0xa0 [ 1839.554087] ? vfs_write+0x354/0xa70 [ 1839.554477] ? fput_many+0x2f/0x1a0 [ 1839.554854] ? ksys_write+0x1a9/0x260 [ 1839.555248] ? __ia32_sys_read+0xb0/0xb0 [ 1839.555673] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1839.556222] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1839.556770] do_syscall_64+0x33/0x40 [ 1839.557164] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1839.557688] RIP: 0033:0x7effa61f4b19 [ 1839.558126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1839.560035] RSP: 002b:00007effa376a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1839.560825] RAX: ffffffffffffffda RBX: 00007effa6307f60 RCX: 00007effa61f4b19 [ 1839.561563] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1839.562297] RBP: 00007effa376a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1839.563031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1839.563768] R13: 00007ffd0f4a831f R14: 00007effa376a300 R15: 0000000000022000 14:54:57 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1839.616719] FAULT_INJECTION: forcing a failure. [ 1839.616719] name failslab, interval 1, probability 0, space 0, times 0 [ 1839.619219] CPU: 0 PID: 9765 Comm: syz-executor.4 Not tainted 5.10.181 #1 [ 1839.620671] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1839.622459] Call Trace: [ 1839.623028] dump_stack+0x107/0x167 [ 1839.623816] should_fail.cold+0x5/0xa [ 1839.624629] ? create_object.isra.0+0x3a/0xa20 [ 1839.625614] should_failslab+0x5/0x20 [ 1839.626427] kmem_cache_alloc+0x5b/0x310 [ 1839.627289] create_object.isra.0+0x3a/0xa20 [ 1839.628219] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1839.629297] kmem_cache_alloc_trace+0x151/0x320 [ 1839.630304] __io_queue_sqe+0x666/0x9d0 [ 1839.631152] ? io_issue_sqe+0x7660/0x7660 [ 1839.632034] ? io_prep_rw+0x7f5/0x1050 [ 1839.632862] io_submit_sqes+0x4461/0x85c0 [ 1839.633792] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1839.635073] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1839.636114] ? lock_downgrade+0x6d0/0x6d0 [ 1839.636999] ? find_held_lock+0x2c/0x110 [ 1839.637894] ? io_submit_sqes+0x85c0/0x85c0 [ 1839.638843] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1839.639868] ? wait_for_completion_io+0x270/0x270 [ 1839.640906] ? rcu_read_lock_any_held+0x75/0xa0 [ 1839.641900] ? vfs_write+0x354/0xa70 [ 1839.642709] ? fput_many+0x2f/0x1a0 [ 1839.643485] ? ksys_write+0x1a9/0x260 [ 1839.644310] ? __ia32_sys_read+0xb0/0xb0 [ 1839.645177] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1839.646333] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1839.647435] do_syscall_64+0x33/0x40 [ 1839.648244] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1839.649329] RIP: 0033:0x7fae80968b19 [ 1839.650157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1839.654058] RSP: 002b:00007fae7dede188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1839.655694] RAX: ffffffffffffffda RBX: 00007fae80a7bf60 RCX: 00007fae80968b19 [ 1839.657202] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1839.658724] RBP: 00007fae7dede1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1839.660229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1839.661730] R13: 00007fffa57e443f R14: 00007fae7dede300 R15: 0000000000022000 14:54:57 executing program 7: setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000080), 0x4) r0 = syz_io_uring_setup(0x3cf0, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x219}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r4, 0x40603d10, &(0x7f0000000200)={'\x00', 0x6}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x2004, @fd_index=0xfffffffe, 0x401, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/78, 0x4e}, {&(0x7f0000000340)=""/118, 0x76}, {&(0x7f00000003c0)=""/211, 0xd3}], 0x3, 0x0, 0x1, {0x0, r5}}, 0x8000) close(r3) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x30, r0, 0x0) syz_io_uring_setup(0x23, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={r10, r11+10000000}}, 0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r7, r9, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x79, 0x5, 0x1}, 0x2bcd) 14:54:57 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a000000, 0x0, 0x0, 0x0) 14:54:57 executing program 7: r0 = syz_io_uring_setup(0x5a06, &(0x7f00000002c0)={0x0, 0x9159, 0x0, 0x800000, 0x3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:54:57 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) [ 1839.911451] FAULT_INJECTION: forcing a failure. [ 1839.911451] name failslab, interval 1, probability 0, space 0, times 0 [ 1839.912776] CPU: 1 PID: 9782 Comm: syz-executor.6 Not tainted 5.10.181 #1 [ 1839.913471] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1839.914356] Call Trace: [ 1839.914660] dump_stack+0x107/0x167 [ 1839.915056] should_fail.cold+0x5/0xa [ 1839.915463] ? create_object.isra.0+0x3a/0xa20 [ 1839.915948] should_failslab+0x5/0x20 [ 1839.916352] kmem_cache_alloc+0x5b/0x310 [ 1839.916783] ? mark_held_locks+0x9e/0xe0 [ 1839.917211] create_object.isra.0+0x3a/0xa20 [ 1839.917682] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1839.918221] kmem_cache_alloc_bulk+0x168/0x320 [ 1839.918724] io_submit_sqes+0x6f76/0x85c0 [ 1839.919172] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1839.919699] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1839.920235] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1839.920746] ? lock_downgrade+0x6d0/0x6d0 [ 1839.921192] ? find_held_lock+0x2c/0x110 [ 1839.921626] ? io_submit_sqes+0x85c0/0x85c0 [ 1839.922107] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1839.922621] ? wait_for_completion_io+0x270/0x270 [ 1839.923136] ? rcu_read_lock_any_held+0x75/0xa0 [ 1839.923628] ? vfs_write+0x354/0xa70 [ 1839.924029] ? fput_many+0x2f/0x1a0 [ 1839.924425] ? ksys_write+0x1a9/0x260 [ 1839.924831] ? __ia32_sys_read+0xb0/0xb0 [ 1839.925271] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1839.925835] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1839.926404] do_syscall_64+0x33/0x40 [ 1839.926808] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1839.927362] RIP: 0033:0x7effa61f4b19 [ 1839.927763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1839.929716] RSP: 002b:00007effa376a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1839.930528] RAX: ffffffffffffffda RBX: 00007effa6307f60 RCX: 00007effa61f4b19 [ 1839.931278] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1839.932043] RBP: 00007effa376a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1839.932799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1839.933546] R13: 00007ffd0f4a831f R14: 00007effa376a300 R15: 0000000000022000 14:55:09 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x30000000, 0x0, 0x0, 0x0) 14:55:09 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 14:55:09 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 14:55:09 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 59) 14:55:09 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r3}, 0x1574) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x825, 0xfffffffd, 0x0, 0x0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f0000000340)={{0x2, 0xffffffff}, 0x100, './file0\x00'}) 14:55:09 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 14:55:09 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:55:09 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1852.114750] FAULT_INJECTION: forcing a failure. [ 1852.114750] name failslab, interval 1, probability 0, space 0, times 0 [ 1852.116584] CPU: 1 PID: 9800 Comm: syz-executor.6 Not tainted 5.10.181 #1 [ 1852.117632] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1852.118919] Call Trace: [ 1852.119328] dump_stack+0x107/0x167 [ 1852.119893] should_fail.cold+0x5/0xa [ 1852.120483] ? create_object.isra.0+0x3a/0xa20 [ 1852.121188] should_failslab+0x5/0x20 [ 1852.121769] kmem_cache_alloc+0x5b/0x310 [ 1852.122411] ? mark_held_locks+0x9e/0xe0 [ 1852.122857] create_object.isra.0+0x3a/0xa20 [ 1852.123333] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1852.123900] kmem_cache_alloc_bulk+0x168/0x320 [ 1852.124397] io_submit_sqes+0x6f76/0x85c0 [ 1852.124867] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1852.125413] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1852.125951] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1852.127174] ? lock_downgrade+0x6d0/0x6d0 [ 1852.128143] ? find_held_lock+0x2c/0x110 [ 1852.129124] ? io_submit_sqes+0x85c0/0x85c0 [ 1852.130194] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1852.131431] ? wait_for_completion_io+0x270/0x270 [ 1852.132677] ? rcu_read_lock_any_held+0x75/0xa0 [ 1852.133874] ? vfs_write+0x354/0xa70 [ 1852.134868] ? fput_many+0x2f/0x1a0 [ 1852.135809] ? ksys_write+0x1a9/0x260 [ 1852.136793] ? __ia32_sys_read+0xb0/0xb0 [ 1852.137849] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1852.139063] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1852.140099] do_syscall_64+0x33/0x40 [ 1852.140849] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1852.141873] RIP: 0033:0x7effa61f4b19 [ 1852.142635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1852.146359] RSP: 002b:00007effa376a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1852.148064] RAX: ffffffffffffffda RBX: 00007effa6307f60 RCX: 00007effa61f4b19 [ 1852.149739] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1852.151265] RBP: 00007effa376a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1852.152735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1852.154260] R13: 00007ffd0f4a831f R14: 00007effa376a300 R15: 0000000000022000 [ 1852.162649] FAULT_INJECTION: forcing a failure. [ 1852.162649] name failslab, interval 1, probability 0, space 0, times 0 [ 1852.165058] CPU: 0 PID: 9797 Comm: syz-executor.4 Not tainted 5.10.181 #1 [ 1852.166476] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1852.168248] Call Trace: [ 1852.168822] dump_stack+0x107/0x167 [ 1852.169613] should_fail.cold+0x5/0xa [ 1852.170442] ? io_setup_async_rw+0x180/0x580 [ 1852.171391] should_failslab+0x5/0x20 [ 1852.172203] __kmalloc+0x72/0x390 [ 1852.172943] ? lock_downgrade+0x6d0/0x6d0 [ 1852.173832] io_setup_async_rw+0x180/0x580 [ 1852.174762] io_read+0xe98/0x11e0 [ 1852.175515] ? kiocb_done+0xc90/0xc90 [ 1852.176334] ? mark_lock+0xf5/0x2df0 [ 1852.177156] ? __lock_acquire+0xbb1/0x5b00 [ 1852.178072] io_issue_sqe+0x2e12/0x7660 [ 1852.178928] ? find_held_lock+0x2c/0x110 [ 1852.179816] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1852.180939] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1852.181950] ? lock_downgrade+0x6d0/0x6d0 [ 1852.182861] ? io_connect+0x610/0x610 [ 1852.183683] ? lock_acquire+0x197/0x470 [ 1852.184535] ? find_held_lock+0x2c/0x110 [ 1852.185407] ? __fget_files+0x26d/0x4c0 [ 1852.186266] ? lock_downgrade+0x6d0/0x6d0 [ 1852.187160] __io_queue_sqe+0x90/0x9d0 [ 1852.188001] ? io_issue_sqe+0x7660/0x7660 [ 1852.188891] ? io_prep_rw+0x7f5/0x1050 [ 1852.189705] io_submit_sqes+0x4461/0x85c0 [ 1852.190619] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1852.191656] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1852.192689] ? lock_downgrade+0x6d0/0x6d0 [ 1852.193570] ? find_held_lock+0x2c/0x110 [ 1852.194455] ? io_submit_sqes+0x85c0/0x85c0 [ 1852.195401] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1852.196419] ? wait_for_completion_io+0x270/0x270 [ 1852.197431] ? rcu_read_lock_any_held+0x75/0xa0 [ 1852.198416] ? vfs_write+0x354/0xa70 [ 1852.199215] ? fput_many+0x2f/0x1a0 [ 1852.199991] ? ksys_write+0x1a9/0x260 [ 1852.200816] ? __ia32_sys_read+0xb0/0xb0 [ 1852.201689] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1852.202820] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1852.203924] do_syscall_64+0x33/0x40 [ 1852.204719] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1852.205811] RIP: 0033:0x7fae80968b19 [ 1852.206610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1852.210563] RSP: 002b:00007fae7dede188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1852.212186] RAX: ffffffffffffffda RBX: 00007fae80a7bf60 RCX: 00007fae80968b19 [ 1852.213708] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1852.215238] RBP: 00007fae7dede1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1852.216761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1852.218289] R13: 00007fffa57e443f R14: 00007fae7dede300 R15: 0000000000022000 14:55:09 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x7d92, &(0x7f0000000080)={0x0, 0x5e27, 0x30, 0x2, 0x1e8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10, 0xffffffffffffffff, 0x8000000) r8 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(r9, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r10}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(r9, r8, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(r8, 0x4b65, 0x2) syz_io_uring_submit(r7, r4, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x3, 0x0, r8, &(0x7f0000000240)={0x5}, r6}, 0x2c) [ 1866.551131] FAULT_INJECTION: forcing a failure. [ 1866.551131] name failslab, interval 1, probability 0, space 0, times 0 [ 1866.552466] CPU: 1 PID: 9828 Comm: syz-executor.4 Not tainted 5.10.181 #1 [ 1866.553209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1866.554093] Call Trace: [ 1866.554398] dump_stack+0x107/0x167 [ 1866.554791] should_fail.cold+0x5/0xa [ 1866.555207] ? create_object.isra.0+0x3a/0xa20 [ 1866.555698] should_failslab+0x5/0x20 [ 1866.556107] kmem_cache_alloc+0x5b/0x310 [ 1866.556547] create_object.isra.0+0x3a/0xa20 [ 1866.557028] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1866.557584] __kmalloc+0x16e/0x390 [ 1866.557969] ? lock_downgrade+0x6d0/0x6d0 [ 1866.558436] io_setup_async_rw+0x180/0x580 [ 1866.558898] io_read+0xe98/0x11e0 [ 1866.559291] ? kiocb_done+0xc90/0xc90 [ 1866.559733] ? mark_lock+0xf5/0x2df0 [ 1866.560127] ? __lock_acquire+0xbb1/0x5b00 [ 1866.560603] io_issue_sqe+0x2e12/0x7660 [ 1866.561043] ? find_held_lock+0x2c/0x110 [ 1866.561500] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1866.562105] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1866.562654] ? lock_downgrade+0x6d0/0x6d0 [ 1866.563101] ? io_connect+0x610/0x610 [ 1866.563512] ? lock_acquire+0x197/0x470 [ 1866.563953] ? find_held_lock+0x2c/0x110 [ 1866.564394] ? __fget_files+0x26d/0x4c0 [ 1866.564832] ? lock_downgrade+0x6d0/0x6d0 [ 1866.565278] __io_queue_sqe+0x90/0x9d0 [ 1866.565702] ? io_issue_sqe+0x7660/0x7660 [ 1866.566159] ? io_prep_rw+0x7f5/0x1050 [ 1866.566592] io_submit_sqes+0x4461/0x85c0 [ 1866.567056] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1866.567567] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1866.568093] ? lock_downgrade+0x6d0/0x6d0 [ 1866.568538] ? find_held_lock+0x2c/0x110 [ 1866.568979] ? io_submit_sqes+0x85c0/0x85c0 [ 1866.569449] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1866.569944] ? wait_for_completion_io+0x270/0x270 [ 1866.570483] ? rcu_read_lock_any_held+0x75/0xa0 [ 1866.570953] ? vfs_write+0x354/0xa70 [ 1866.571362] ? fput_many+0x2f/0x1a0 [ 1866.571736] ? ksys_write+0x1a9/0x260 [ 1866.572150] ? __ia32_sys_read+0xb0/0xb0 [ 1866.572566] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1866.573142] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1866.573672] do_syscall_64+0x33/0x40 [ 1866.574077] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1866.574614] RIP: 0033:0x7fae80968b19 [ 1866.575024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1866.577088] RSP: 002b:00007fae7dede188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1866.577942] RAX: ffffffffffffffda RBX: 00007fae80a7bf60 RCX: 00007fae80968b19 [ 1866.578762] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1866.579536] RBP: 00007fae7dede1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1866.580323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1866.581096] R13: 00007fffa57e443f R14: 00007fae7dede300 R15: 0000000000022000 [ 1866.590839] FAULT_INJECTION: forcing a failure. [ 1866.590839] name failslab, interval 1, probability 0, space 0, times 0 [ 1866.593635] CPU: 0 PID: 9831 Comm: syz-executor.6 Not tainted 5.10.181 #1 [ 1866.595271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1866.597389] Call Trace: [ 1866.598068] dump_stack+0x107/0x167 [ 1866.598878] should_fail.cold+0x5/0xa [ 1866.599857] ? create_object.isra.0+0x3a/0xa20 [ 1866.600861] should_failslab+0x5/0x20 [ 1866.601837] kmem_cache_alloc+0x5b/0x310 [ 1866.602734] ? mark_held_locks+0x9e/0xe0 [ 1866.603617] create_object.isra.0+0x3a/0xa20 [ 1866.604569] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1866.605666] kmem_cache_alloc_bulk+0x168/0x320 [ 1866.606660] io_submit_sqes+0x6f76/0x85c0 [ 1866.607746] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1866.608925] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1866.610113] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1866.611331] ? lock_downgrade+0x6d0/0x6d0 [ 1866.612307] ? find_held_lock+0x2c/0x110 [ 1866.613278] ? io_submit_sqes+0x85c0/0x85c0 [ 1866.614323] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1866.615474] ? wait_for_completion_io+0x270/0x270 [ 1866.616621] ? rcu_read_lock_any_held+0x75/0xa0 [ 1866.617726] ? vfs_write+0x354/0xa70 [ 1866.618635] ? fput_many+0x2f/0x1a0 [ 1866.619432] ? ksys_write+0x1a9/0x260 [ 1866.620247] ? __ia32_sys_read+0xb0/0xb0 [ 1866.621104] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1866.622243] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1866.623332] do_syscall_64+0x33/0x40 [ 1866.624135] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1866.625214] RIP: 0033:0x7effa61f4b19 [ 1866.626015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1866.629884] RSP: 002b:00007effa376a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1866.631518] RAX: ffffffffffffffda RBX: 00007effa6307f60 RCX: 00007effa61f4b19 [ 1866.633016] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1866.634517] RBP: 00007effa376a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1866.636010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1866.637690] R13: 00007ffd0f4a831f R14: 00007effa376a300 R15: 0000000000022000 14:55:24 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 60) 14:55:24 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:55:24 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x12, 0x0, 0x0, 0x0) 14:55:24 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 14:55:24 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:55:24 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x36000000, 0x0, 0x0, 0x0) 14:55:24 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0) 14:55:24 executing program 7: recvmmsg$unix(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000240)=""/196, 0xc4}], 0x1}}, {{&(0x7f0000000380)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/199, 0xc7}, {&(0x7f0000000500)=""/57, 0x39}, {&(0x7f0000000540)=""/113, 0x71}], 0x3, &(0x7f0000000600)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/191, 0xbf}], 0x1}}], 0x3, 0x40000000, &(0x7f0000000880)={0x0, 0x3938700}) r1 = syz_io_uring_setup(0x7e16, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) close(r4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:55:24 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r4, 0x40603d10, &(0x7f0000000200)) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x20c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = gettid() mq_notify(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x20, 0x4}) setpgid(0x0, r8) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8, 0x7f, 0x1, 0x7a, 0x0, 0x4, 0x1, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0xc300, 0x4, 0x1ff, 0x4, 0xfffffffffffffff9, 0x4, 0x7fff, 0x0, 0xffff0001, 0x0, 0x2f}, r8, 0x4, r7, 0x2) ptrace(0x8, r8) syz_open_procfs(r8, &(0x7f0000000180)='net/igmp6\x00') 14:55:24 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 61) [ 1866.878301] FAULT_INJECTION: forcing a failure. [ 1866.878301] name failslab, interval 1, probability 0, space 0, times 0 [ 1866.879655] CPU: 1 PID: 9856 Comm: syz-executor.4 Not tainted 5.10.181 #1 [ 1866.880397] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1866.881307] Call Trace: [ 1866.881597] dump_stack+0x107/0x167 [ 1866.881993] should_fail.cold+0x5/0xa [ 1866.882425] ? create_object.isra.0+0x3a/0xa20 [ 1866.882918] should_failslab+0x5/0x20 [ 1866.883329] kmem_cache_alloc+0x5b/0x310 [ 1866.883775] create_object.isra.0+0x3a/0xa20 [ 1866.884247] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1866.884805] kmem_cache_alloc_trace+0x151/0x320 [ 1866.885314] __io_queue_sqe+0x666/0x9d0 [ 1866.885742] ? io_issue_sqe+0x7660/0x7660 [ 1866.886192] ? io_prep_rw+0x7f5/0x1050 [ 1866.886629] io_submit_sqes+0x4461/0x85c0 [ 1866.887094] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1866.887636] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1866.888163] ? lock_downgrade+0x6d0/0x6d0 [ 1866.888631] ? find_held_lock+0x2c/0x110 [ 1866.889100] ? io_submit_sqes+0x85c0/0x85c0 [ 1866.889597] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1866.890146] ? wait_for_completion_io+0x270/0x270 [ 1866.890687] ? rcu_read_lock_any_held+0x75/0xa0 [ 1866.891210] ? vfs_write+0x354/0xa70 [ 1866.891636] ? fput_many+0x2f/0x1a0 [ 1866.892047] ? ksys_write+0x1a9/0x260 [ 1866.892494] ? __ia32_sys_read+0xb0/0xb0 [ 1866.892958] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1866.893549] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1866.894138] do_syscall_64+0x33/0x40 [ 1866.894556] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1866.895137] RIP: 0033:0x7fae80968b19 [ 1866.895555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1866.897632] RSP: 002b:00007fae7dede188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1866.898500] RAX: ffffffffffffffda RBX: 00007fae80a7bf60 RCX: 00007fae80968b19 [ 1866.899314] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1866.900120] RBP: 00007fae7dede1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1866.900921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1866.901735] R13: 00007fffa57e443f R14: 00007fae7dede300 R15: 0000000000022000 14:55:24 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x18, 0x0, 0x0, 0x0) 14:55:24 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) 14:55:24 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:55:24 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:55:24 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 62) 14:55:24 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c000000, 0x0, 0x0, 0x0) [ 1867.257114] FAULT_INJECTION: forcing a failure. [ 1867.257114] name failslab, interval 1, probability 0, space 0, times 0 [ 1867.258979] CPU: 1 PID: 9869 Comm: syz-executor.4 Not tainted 5.10.181 #1 [ 1867.260060] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1867.261369] Call Trace: [ 1867.261793] dump_stack+0x107/0x167 [ 1867.262378] should_fail.cold+0x5/0xa [ 1867.262983] ? create_object.isra.0+0x3a/0xa20 [ 1867.263708] should_failslab+0x5/0x20 [ 1867.264312] kmem_cache_alloc+0x5b/0x310 [ 1867.264959] create_object.isra.0+0x3a/0xa20 [ 1867.265656] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1867.266499] kmem_cache_alloc_trace+0x151/0x320 [ 1867.267255] __io_queue_sqe+0x666/0x9d0 [ 1867.267921] ? io_issue_sqe+0x7660/0x7660 [ 1867.268614] ? io_prep_rw+0x7f5/0x1050 [ 1867.269265] io_submit_sqes+0x4461/0x85c0 [ 1867.269981] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1867.270805] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1867.271613] ? lock_downgrade+0x6d0/0x6d0 [ 1867.272311] ? find_held_lock+0x2c/0x110 [ 1867.272991] ? io_submit_sqes+0x85c0/0x85c0 [ 1867.273697] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1867.274504] ? wait_for_completion_io+0x270/0x270 [ 1867.275268] ? rcu_read_lock_any_held+0x75/0xa0 [ 1867.276052] ? vfs_write+0x354/0xa70 [ 1867.276656] ? fput_many+0x2f/0x1a0 [ 1867.277263] ? ksys_write+0x1a9/0x260 [ 1867.277900] ? __ia32_sys_read+0xb0/0xb0 [ 1867.278588] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1867.279455] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1867.280305] do_syscall_64+0x33/0x40 [ 1867.280919] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1867.281764] RIP: 0033:0x7fae80968b19 [ 1867.282395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1867.285436] RSP: 002b:00007fae7dede188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1867.286704] RAX: ffffffffffffffda RBX: 00007fae80a7bf60 RCX: 00007fae80968b19 [ 1867.287884] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1867.289061] RBP: 00007fae7dede1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1867.290237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1867.291392] R13: 00007fffa57e443f R14: 00007fae7dede300 R15: 0000000000022000 14:55:24 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 14:55:24 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1867.491522] FAULT_INJECTION: forcing a failure. [ 1867.491522] name failslab, interval 1, probability 0, space 0, times 0 [ 1867.494396] CPU: 0 PID: 9877 Comm: syz-executor.6 Not tainted 5.10.181 #1 [ 1867.495923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1867.497751] Call Trace: [ 1867.498359] dump_stack+0x107/0x167 [ 1867.499188] should_fail.cold+0x5/0xa [ 1867.500052] ? io_setup_async_rw+0x180/0x580 [ 1867.501043] should_failslab+0x5/0x20 [ 1867.501894] __kmalloc+0x72/0x390 [ 1867.502694] io_setup_async_rw+0x180/0x580 [ 1867.503655] io_read+0xe98/0x11e0 [ 1867.504438] ? kiocb_done+0xc90/0xc90 [ 1867.505321] ? stack_trace_consume_entry+0x160/0x160 [ 1867.506480] ? lock_acquire+0x197/0x470 [ 1867.507385] ? __lock_acquire+0xbb1/0x5b00 [ 1867.508344] io_issue_sqe+0x2e12/0x7660 [ 1867.509249] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1867.510434] ? lock_chain_count+0x20/0x20 [ 1867.511368] ? __is_insn_slot_addr+0x14c/0x290 [ 1867.512401] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1867.513583] ? io_connect+0x610/0x610 [ 1867.514459] ? lock_acquire+0x197/0x470 [ 1867.515355] ? find_held_lock+0x2c/0x110 [ 1867.516275] ? __fget_files+0x26d/0x4c0 [ 1867.517174] ? lock_downgrade+0x6d0/0x6d0 [ 1867.518112] __io_queue_sqe+0x90/0x9d0 [ 1867.519026] ? io_issue_sqe+0x7660/0x7660 [ 1867.519962] ? io_prep_rw+0x7f5/0x1050 [ 1867.520847] io_submit_sqes+0x4461/0x85c0 [ 1867.521812] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1867.522942] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1867.524019] ? lock_downgrade+0x6d0/0x6d0 [ 1867.524947] ? find_held_lock+0x2c/0x110 [ 1867.525866] ? io_submit_sqes+0x85c0/0x85c0 [ 1867.526837] ? __mutex_unlock_slowpath+0xe1/0x600 14:55:25 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e, 0x0, 0x0, 0x0) [ 1867.527926] ? wait_for_completion_io+0x270/0x270 [ 1867.529146] ? rcu_read_lock_any_held+0x75/0xa0 [ 1867.530191] ? vfs_write+0x354/0xa70 [ 1867.531049] ? fput_many+0x2f/0x1a0 [ 1867.531873] ? ksys_write+0x1a9/0x260 [ 1867.532733] ? __ia32_sys_read+0xb0/0xb0 [ 1867.533653] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1867.534841] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1867.535966] do_syscall_64+0x33/0x40 [ 1867.536810] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1867.537961] RIP: 0033:0x7effa61f4b19 [ 1867.538808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1867.542960] RSP: 002b:00007effa376a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1867.544680] RAX: ffffffffffffffda RBX: 00007effa6307f60 RCX: 00007effa61f4b19 [ 1867.546293] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1867.547899] RBP: 00007effa376a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1867.549505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1867.551131] R13: 00007ffd0f4a831f R14: 00007effa376a300 R15: 0000000000022000 14:55:25 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:55:25 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) 14:55:37 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:55:37 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 63) 14:55:37 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x6, 0x0, 0x0) [ 1879.770883] FAULT_INJECTION: forcing a failure. [ 1879.770883] name failslab, interval 1, probability 0, space 0, times 0 [ 1879.772118] CPU: 1 PID: 9914 Comm: syz-executor.4 Not tainted 5.10.181 #1 [ 1879.772832] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1879.773695] Call Trace: [ 1879.773982] dump_stack+0x107/0x167 [ 1879.774377] should_fail.cold+0x5/0xa [ 1879.774795] ? io_setup_async_rw+0x180/0x580 [ 1879.775265] should_failslab+0x5/0x20 [ 1879.775669] __kmalloc+0x72/0x390 [ 1879.776036] ? lock_downgrade+0x6d0/0x6d0 [ 1879.776478] io_setup_async_rw+0x180/0x580 [ 1879.776932] io_read+0xe98/0x11e0 [ 1879.777304] ? kiocb_done+0xc90/0xc90 [ 1879.777712] ? mark_lock+0xf5/0x2df0 [ 1879.778128] ? __lock_acquire+0xbb1/0x5b00 [ 1879.778590] io_issue_sqe+0x2e12/0x7660 [ 1879.779018] ? find_held_lock+0x2c/0x110 [ 1879.779449] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1879.780006] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1879.780515] ? lock_downgrade+0x6d0/0x6d0 [ 1879.780951] ? io_connect+0x610/0x610 [ 1879.781359] ? lock_acquire+0x197/0x470 [ 1879.781783] ? find_held_lock+0x2c/0x110 [ 1879.782215] ? __fget_files+0x26d/0x4c0 [ 1879.782655] ? lock_downgrade+0x6d0/0x6d0 [ 1879.783104] __io_queue_sqe+0x90/0x9d0 [ 1879.783514] ? io_issue_sqe+0x7660/0x7660 [ 1879.783955] ? io_prep_rw+0x7f5/0x1050 [ 1879.784371] io_submit_sqes+0x4461/0x85c0 [ 1879.784822] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1879.785350] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1879.785869] ? lock_downgrade+0x6d0/0x6d0 [ 1879.786308] ? find_held_lock+0x2c/0x110 [ 1879.786759] ? io_submit_sqes+0x85c0/0x85c0 [ 1879.787218] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1879.787730] ? wait_for_completion_io+0x270/0x270 [ 1879.788253] ? rcu_read_lock_any_held+0x75/0xa0 [ 1879.788747] ? vfs_write+0x354/0xa70 14:55:37 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:55:37 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x322}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4}, 0x1) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(r8, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r9}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(r8, r7, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(r7, 0x4b65, 0x2) r10 = open(&(0x7f00000000c0)='./file0\x00', 0xc0100, 0x121) r11 = openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000240)={0x712c5458, 0x0, &(0x7f00000001c0)=[r0, r10, r5, 0xffffffffffffffff, r5, r3, r11, r6, r5]}, 0x9) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:55:37 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0) 14:55:37 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 14:55:37 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x24, 0x0, 0x0, 0x0) [ 1879.789369] ? fput_many+0x2f/0x1a0 [ 1879.789862] ? ksys_write+0x1a9/0x260 [ 1879.790300] ? __ia32_sys_read+0xb0/0xb0 [ 1879.790743] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1879.791305] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1879.791851] do_syscall_64+0x33/0x40 [ 1879.792245] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1879.792781] RIP: 0033:0x7fae80968b19 [ 1879.793192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1879.795128] RSP: 002b:00007fae7dede188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1879.795932] RAX: ffffffffffffffda RBX: 00007fae80a7bf60 RCX: 00007fae80968b19 [ 1879.796684] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1879.797437] RBP: 00007fae7dede1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1879.798189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1879.798960] R13: 00007fffa57e443f R14: 00007fae7dede300 R15: 0000000000022000 [ 1879.845177] FAULT_INJECTION: forcing a failure. [ 1879.845177] name failslab, interval 1, probability 0, space 0, times 0 [ 1879.847960] CPU: 1 PID: 9924 Comm: syz-executor.6 Not tainted 5.10.181 #1 [ 1879.849592] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1879.851461] Call Trace: [ 1879.852011] dump_stack+0x107/0x167 [ 1879.852751] should_fail.cold+0x5/0xa [ 1879.853528] ? create_object.isra.0+0x3a/0xa20 [ 1879.854461] should_failslab+0x5/0x20 [ 1879.855231] kmem_cache_alloc+0x5b/0x310 [ 1879.856064] create_object.isra.0+0x3a/0xa20 [ 1879.856959] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1879.857995] __kmalloc+0x16e/0x390 [ 1879.858741] io_setup_async_rw+0x180/0x580 [ 1879.859598] io_read+0xe98/0x11e0 [ 1879.860313] ? kiocb_done+0xc90/0xc90 [ 1879.861104] ? stack_trace_consume_entry+0x160/0x160 [ 1879.862152] ? lock_acquire+0x197/0x470 [ 1879.862973] ? __lock_acquire+0xbb1/0x5b00 [ 1879.863837] io_issue_sqe+0x2e12/0x7660 [ 1879.864656] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1879.865726] ? lock_chain_count+0x20/0x20 [ 1879.866581] ? __is_insn_slot_addr+0x14c/0x290 [ 1879.867510] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1879.868577] ? io_connect+0x610/0x610 [ 1879.869358] ? lock_acquire+0x197/0x470 [ 1879.870166] ? find_held_lock+0x2c/0x110 [ 1879.871019] ? __fget_files+0x26d/0x4c0 [ 1879.871832] ? lock_downgrade+0x6d0/0x6d0 [ 1879.872681] __io_queue_sqe+0x90/0x9d0 [ 1879.873481] ? io_issue_sqe+0x7660/0x7660 [ 1879.874326] ? io_prep_rw+0x7f5/0x1050 [ 1879.875132] io_submit_sqes+0x4461/0x85c0 [ 1879.876003] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1879.877010] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1879.877999] ? lock_downgrade+0x6d0/0x6d0 [ 1879.878855] ? find_held_lock+0x2c/0x110 [ 1879.879683] ? io_submit_sqes+0x85c0/0x85c0 [ 1879.880566] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1879.881554] ? wait_for_completion_io+0x270/0x270 [ 1879.882535] ? rcu_read_lock_any_held+0x75/0xa0 [ 1879.883481] ? vfs_write+0x354/0xa70 [ 1879.884237] ? fput_many+0x2f/0x1a0 [ 1879.884979] ? ksys_write+0x1a9/0x260 [ 1879.885752] ? __ia32_sys_read+0xb0/0xb0 [ 1879.886597] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1879.887658] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1879.888707] do_syscall_64+0x33/0x40 [ 1879.889465] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1879.890533] RIP: 0033:0x7effa61f4b19 [ 1879.891291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1879.895020] RSP: 002b:00007effa376a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1879.896571] RAX: ffffffffffffffda RBX: 00007effa6307f60 RCX: 00007effa61f4b19 [ 1879.898017] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1879.899473] RBP: 00007effa376a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1879.900923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1879.902391] R13: 00007ffd0f4a831f R14: 00007effa376a300 R15: 0000000000022000 14:55:37 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) 14:55:37 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 14:55:37 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0) [ 1880.207906] FAULT_INJECTION: forcing a failure. [ 1880.207906] name failslab, interval 1, probability 0, space 0, times 0 [ 1880.210826] CPU: 0 PID: 9933 Comm: syz-executor.6 Not tainted 5.10.181 #1 [ 1880.212250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1880.213974] Call Trace: [ 1880.214545] dump_stack+0x107/0x167 [ 1880.215311] should_fail.cold+0x5/0xa [ 1880.216107] ? __io_queue_sqe+0x666/0x9d0 [ 1880.216974] should_failslab+0x5/0x20 [ 1880.217764] kmem_cache_alloc_trace+0x55/0x320 [ 1880.218725] __io_queue_sqe+0x666/0x9d0 [ 1880.219564] ? io_issue_sqe+0x7660/0x7660 [ 1880.220434] ? io_prep_rw+0x7f5/0x1050 [ 1880.221246] io_submit_sqes+0x4461/0x85c0 [ 1880.222140] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1880.223196] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1880.224212] ? lock_downgrade+0x6d0/0x6d0 [ 1880.225067] ? find_held_lock+0x2c/0x110 [ 1880.225924] ? io_submit_sqes+0x85c0/0x85c0 [ 1880.226838] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1880.227861] ? wait_for_completion_io+0x270/0x270 [ 1880.228876] ? rcu_read_lock_any_held+0x75/0xa0 [ 1880.229855] ? vfs_write+0x354/0xa70 [ 1880.230647] ? fput_many+0x2f/0x1a0 [ 1880.231418] ? ksys_write+0x1a9/0x260 [ 1880.232213] ? __ia32_sys_read+0xb0/0xb0 [ 1880.233078] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1880.234171] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1880.235282] do_syscall_64+0x33/0x40 [ 1880.236078] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1880.237168] RIP: 0033:0x7effa61f4b19 [ 1880.237961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1880.241871] RSP: 002b:00007effa376a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1880.243511] RAX: ffffffffffffffda RBX: 00007effa6307f60 RCX: 00007effa61f4b19 [ 1880.245035] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1880.246567] RBP: 00007effa376a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1880.247995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1880.249525] R13: 00007ffd0f4a831f R14: 00007effa376a300 R15: 0000000000022000 14:55:37 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xc, 0x0, 0x0) 14:55:37 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = pidfd_open(0x0, 0x0) pwrite64(r4, &(0x7f0000000340)="bd1a108f0cab61ef10734530b7ce975edd6cc1dea6151572d5468da2145c105b861d5c092e2ad4024eefebce6b7998f76e82bfee533c9ca2973f9f957b3b5e9ece7b66ffafb926c1dff89d9889d9543eee8dff234a95265f276db19ca6e69584744a8e7748dbd313ffe29f566f609f73c9d645125f97c6fdb4ac8e27b62b8a8d41472197b4cf4a2f26a9f06364155d6e42c3c5087ae8405fff6f05820d9b8e0b", 0xa0, 0x5) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000180)=@l2tp={0x2, 0x0, @private}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x100) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) pipe2(&(0x7f0000000080), 0x84800) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:55:37 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 64) [ 1880.551150] FAULT_INJECTION: forcing a failure. [ 1880.551150] name failslab, interval 1, probability 0, space 0, times 0 [ 1880.553444] CPU: 0 PID: 9950 Comm: syz-executor.4 Not tainted 5.10.181 #1 [ 1880.554812] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1880.556469] Call Trace: [ 1880.557004] dump_stack+0x107/0x167 [ 1880.557742] should_fail.cold+0x5/0xa [ 1880.558522] ? create_object.isra.0+0x3a/0xa20 [ 1880.559436] should_failslab+0x5/0x20 [ 1880.560208] kmem_cache_alloc+0x5b/0x310 [ 1880.561049] create_object.isra.0+0x3a/0xa20 [ 1880.561954] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1880.563006] __kmalloc+0x16e/0x390 [ 1880.563734] ? lock_downgrade+0x6d0/0x6d0 [ 1880.564600] io_setup_async_rw+0x180/0x580 [ 1880.565495] io_read+0xe98/0x11e0 [ 1880.566237] ? kiocb_done+0xc90/0xc90 [ 1880.567034] ? mark_lock+0xf5/0x2df0 [ 1880.567825] ? __lock_acquire+0xbb1/0x5b00 [ 1880.568687] io_issue_sqe+0x2e12/0x7660 [ 1880.569512] ? find_held_lock+0x2c/0x110 [ 1880.570366] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1880.571443] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1880.572401] ? lock_downgrade+0x6d0/0x6d0 [ 1880.573230] ? io_connect+0x610/0x610 [ 1880.574004] ? lock_acquire+0x197/0x470 [ 1880.574822] ? find_held_lock+0x2c/0x110 [ 1880.575657] ? __fget_files+0x26d/0x4c0 [ 1880.576457] ? lock_downgrade+0x6d0/0x6d0 [ 1880.577312] __io_queue_sqe+0x90/0x9d0 [ 1880.578100] ? io_issue_sqe+0x7660/0x7660 [ 1880.578943] ? io_prep_rw+0x7f5/0x1050 [ 1880.579729] io_submit_sqes+0x4461/0x85c0 [ 1880.580599] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1880.581612] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1880.582612] ? lock_downgrade+0x6d0/0x6d0 [ 1880.583439] ? find_held_lock+0x2c/0x110 [ 1880.584269] ? io_submit_sqes+0x85c0/0x85c0 [ 1880.585149] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1880.586132] ? wait_for_completion_io+0x270/0x270 [ 1880.587105] ? rcu_read_lock_any_held+0x75/0xa0 [ 1880.588043] ? vfs_write+0x354/0xa70 [ 1880.588790] ? fput_many+0x2f/0x1a0 [ 1880.589524] ? ksys_write+0x1a9/0x260 [ 1880.590292] ? __ia32_sys_read+0xb0/0xb0 [ 1880.591121] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1880.592214] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1880.593259] do_syscall_64+0x33/0x40 [ 1880.594016] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1880.595074] RIP: 0033:0x7fae80968b19 [ 1880.595837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1880.599549] RSP: 002b:00007fae7dede188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1880.601094] RAX: ffffffffffffffda RBX: 00007fae80a7bf60 RCX: 00007fae80968b19 [ 1880.602564] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1880.603999] RBP: 00007fae7dede1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1880.605459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1880.606936] R13: 00007fffa57e443f R14: 00007fae7dede300 R15: 0000000000022000 14:55:38 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:55:38 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:55:38 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a, 0x0, 0x0, 0x0) 14:55:38 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) 14:55:50 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 14:55:50 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 14:55:50 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={r6, r7+10000000}}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r8, 0x40603d10, &(0x7f0000000200)) syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd=r8, 0x0, 0x0, 0x401, 0x1e, 0x1, {0x0, 0x0, r0}}, 0xff) dup3(r3, r0, 0x80000) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x80000f, 0x12, r3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_enter(r3, 0x88e, 0xbb97, 0x3, &(0x7f0000000080)={[0x4]}, 0x8) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x3, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:55:50 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:55:50 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x12, 0x0, 0x0) 14:55:50 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:55:50 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 65) 14:55:50 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x30, 0x0, 0x0, 0x0) [ 1892.902696] FAULT_INJECTION: forcing a failure. [ 1892.902696] name failslab, interval 1, probability 0, space 0, times 0 [ 1892.904019] CPU: 1 PID: 9987 Comm: syz-executor.6 Not tainted 5.10.181 #1 [ 1892.904762] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1892.905662] Call Trace: [ 1892.905955] dump_stack+0x107/0x167 [ 1892.906357] should_fail.cold+0x5/0xa [ 1892.906779] ? create_object.isra.0+0x3a/0xa20 [ 1892.907267] should_failslab+0x5/0x20 [ 1892.907674] kmem_cache_alloc+0x5b/0x310 [ 1892.908117] create_object.isra.0+0x3a/0xa20 [ 1892.908589] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1892.909134] kmem_cache_alloc_trace+0x151/0x320 [ 1892.909629] __io_queue_sqe+0x666/0x9d0 [ 1892.910081] ? io_issue_sqe+0x7660/0x7660 [ 1892.910525] ? io_prep_rw+0x7f5/0x1050 [ 1892.910970] io_submit_sqes+0x4461/0x85c0 [ 1892.911421] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1892.911966] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1892.912484] ? lock_downgrade+0x6d0/0x6d0 [ 1892.912931] ? find_held_lock+0x2c/0x110 [ 1892.913384] ? io_submit_sqes+0x85c0/0x85c0 [ 1892.913849] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1892.914368] ? wait_for_completion_io+0x270/0x270 [ 1892.914938] ? rcu_read_lock_any_held+0x75/0xa0 [ 1892.915438] ? vfs_write+0x354/0xa70 [ 1892.915844] ? fput_many+0x2f/0x1a0 [ 1892.916230] ? ksys_write+0x1a9/0x260 [ 1892.916635] ? __ia32_sys_read+0xb0/0xb0 [ 1892.917063] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1892.917632] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1892.918184] do_syscall_64+0x33/0x40 [ 1892.918600] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1892.919148] RIP: 0033:0x7effa61f4b19 [ 1892.919544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1892.921490] RSP: 002b:00007effa376a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1892.922298] RAX: ffffffffffffffda RBX: 00007effa6307f60 RCX: 00007effa61f4b19 [ 1892.923066] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1892.923828] RBP: 00007effa376a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1892.924577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1892.925340] R13: 00007ffd0f4a831f R14: 00007effa376a300 R15: 0000000000022000 [ 1892.954027] FAULT_INJECTION: forcing a failure. [ 1892.954027] name failslab, interval 1, probability 0, space 0, times 0 [ 1892.956505] CPU: 0 PID: 9980 Comm: syz-executor.4 Not tainted 5.10.181 #1 [ 1892.957995] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1892.959810] Call Trace: [ 1892.960391] dump_stack+0x107/0x167 [ 1892.961187] should_fail.cold+0x5/0xa [ 1892.962021] ? __io_queue_sqe+0x666/0x9d0 [ 1892.962951] should_failslab+0x5/0x20 [ 1892.963775] kmem_cache_alloc_trace+0x55/0x320 [ 1892.964770] __io_queue_sqe+0x666/0x9d0 [ 1892.965638] ? io_issue_sqe+0x7660/0x7660 [ 1892.966549] ? io_prep_rw+0x7f5/0x1050 [ 1892.967395] io_submit_sqes+0x4461/0x85c0 [ 1892.968318] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1892.969402] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1892.970432] ? lock_downgrade+0x6d0/0x6d0 [ 1892.971344] ? find_held_lock+0x2c/0x110 [ 1892.972240] ? io_submit_sqes+0x85c0/0x85c0 [ 1892.973180] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1892.974237] ? wait_for_completion_io+0x270/0x270 [ 1892.975300] ? rcu_read_lock_any_held+0x75/0xa0 [ 1892.976312] ? vfs_write+0x354/0xa70 [ 1892.977121] ? fput_many+0x2f/0x1a0 [ 1892.977908] ? ksys_write+0x1a9/0x260 [ 1892.978755] ? __ia32_sys_read+0xb0/0xb0 [ 1892.979638] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1892.980771] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1892.981890] do_syscall_64+0x33/0x40 [ 1892.982707] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1892.983812] RIP: 0033:0x7fae80968b19 [ 1892.984621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:55:50 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1892.988609] RSP: 002b:00007fae7dede188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1892.990443] RAX: ffffffffffffffda RBX: 00007fae80a7bf60 RCX: 00007fae80968b19 [ 1892.991986] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1892.993503] RBP: 00007fae7dede1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1892.995062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1892.996619] R13: 00007fffa57e443f R14: 00007fae7dede300 R15: 0000000000022000 14:55:50 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:55:50 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x18, 0x0, 0x0) 14:55:50 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x2e1e, 0x4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:55:50 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) [ 1893.177032] FAULT_INJECTION: forcing a failure. [ 1893.177032] name failslab, interval 1, probability 0, space 0, times 0 [ 1893.178358] CPU: 1 PID: 10006 Comm: syz-executor.6 Not tainted 5.10.181 #1 [ 1893.179102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1893.179984] Call Trace: [ 1893.180291] dump_stack+0x107/0x167 [ 1893.180682] should_fail.cold+0x5/0xa [ 1893.181091] ? create_object.isra.0+0x3a/0xa20 [ 1893.181574] should_failslab+0x5/0x20 [ 1893.182005] kmem_cache_alloc+0x5b/0x310 [ 1893.182441] ? find_held_lock+0x2c/0x110 [ 1893.182905] create_object.isra.0+0x3a/0xa20 [ 1893.183370] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1893.183908] __kmalloc_node+0x1ae/0x420 [ 1893.184336] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1893.184888] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1893.185430] kmem_cache_alloc_bulk+0x182/0x320 [ 1893.185933] io_submit_sqes+0x6f76/0x85c0 [ 1893.186382] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1893.186928] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1893.187464] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1893.187990] ? lock_downgrade+0x6d0/0x6d0 [ 1893.188431] ? find_held_lock+0x2c/0x110 [ 1893.188871] ? io_submit_sqes+0x85c0/0x85c0 [ 1893.189344] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1893.189864] ? wait_for_completion_io+0x270/0x270 [ 1893.190386] ? rcu_read_lock_any_held+0x75/0xa0 [ 1893.190893] ? vfs_write+0x354/0xa70 [ 1893.191291] ? fput_many+0x2f/0x1a0 [ 1893.191683] ? ksys_write+0x1a9/0x260 [ 1893.192088] ? __ia32_sys_read+0xb0/0xb0 [ 1893.192528] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1893.193091] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1893.193643] do_syscall_64+0x33/0x40 [ 1893.194040] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1893.194594] RIP: 0033:0x7effa61f4b19 [ 1893.194989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1893.196939] RSP: 002b:00007effa376a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1893.197780] RAX: ffffffffffffffda RBX: 00007effa6307f60 RCX: 00007effa61f4b19 [ 1893.198560] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1893.199323] RBP: 00007effa376a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1893.200081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1893.200843] R13: 00007ffd0f4a831f R14: 00007effa376a300 R15: 0000000000022000 14:55:50 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:55:50 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1e, 0x0, 0x0) 14:55:50 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x100010, r3, 0x8000000) r6 = openat$cgroup_type(r3, &(0x7f0000000080), 0x2, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000000c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r6, 0x4135, 0x0, 0x1f}, 0x1ff) 14:55:50 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:55:50 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x36, 0x0, 0x0, 0x0) 14:55:50 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000) 14:55:50 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:55:50 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x24, 0x0, 0x0) 14:55:50 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:55:51 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:56:04 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) [ 1907.148835] FAULT_INJECTION: forcing a failure. [ 1907.148835] name failslab, interval 1, probability 0, space 0, times 0 [ 1907.150131] CPU: 1 PID: 10050 Comm: syz-executor.4 Not tainted 5.10.181 #1 [ 1907.150871] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1907.151777] Call Trace: [ 1907.152066] dump_stack+0x107/0x167 [ 1907.152466] should_fail.cold+0x5/0xa [ 1907.152891] ? create_object.isra.0+0x3a/0xa20 [ 1907.153386] should_failslab+0x5/0x20 [ 1907.153805] kmem_cache_alloc+0x5b/0x310 [ 1907.154255] create_object.isra.0+0x3a/0xa20 [ 1907.154764] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1907.155316] kmem_cache_alloc_trace+0x151/0x320 [ 1907.155823] __io_queue_sqe+0x666/0x9d0 [ 1907.156251] ? io_issue_sqe+0x7660/0x7660 [ 1907.156709] ? io_prep_rw+0x7f5/0x1050 [ 1907.157137] io_submit_sqes+0x4461/0x85c0 [ 1907.157608] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1907.158164] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1907.158688] ? lock_downgrade+0x6d0/0x6d0 [ 1907.159152] ? find_held_lock+0x2c/0x110 [ 1907.159600] ? io_submit_sqes+0x85c0/0x85c0 [ 1907.160076] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1907.160600] ? wait_for_completion_io+0x270/0x270 [ 1907.161130] ? rcu_read_lock_any_held+0x75/0xa0 [ 1907.161635] ? vfs_write+0x354/0xa70 [ 1907.162047] ? fput_many+0x2f/0x1a0 [ 1907.162433] ? ksys_write+0x1a9/0x260 [ 1907.162870] ? __ia32_sys_read+0xb0/0xb0 [ 1907.163327] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1907.163921] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1907.164482] do_syscall_64+0x33/0x40 [ 1907.164894] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1907.165465] RIP: 0033:0x7fae80968b19 [ 1907.165882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1907.167903] RSP: 002b:00007fae7dede188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1907.168749] RAX: ffffffffffffffda RBX: 00007fae80a7bf60 RCX: 00007fae80968b19 [ 1907.169547] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1907.170332] RBP: 00007fae7dede1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1907.171139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1907.171920] R13: 00007fffa57e443f R14: 00007fae7dede300 R15: 0000000000022000 14:56:04 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 66) 14:56:04 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2a, 0x0, 0x0) 14:56:04 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:56:04 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907151e0cdc05f9c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r6}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(0xffffffffffffffff, r4, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(r4, 0x4b65, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={r9, r10+10000000}}, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x8001) io_uring_enter(r0, 0x58a9, 0x0, 0x0, 0x0, 0x0) 14:56:04 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:56:04 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 14:56:04 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c, 0x0, 0x0, 0x0) [ 1907.222676] FAULT_INJECTION: forcing a failure. [ 1907.222676] name failslab, interval 1, probability 0, space 0, times 0 [ 1907.225278] CPU: 0 PID: 10058 Comm: syz-executor.6 Not tainted 5.10.181 #1 [ 1907.226788] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1907.228463] Call Trace: [ 1907.229032] dump_stack+0x107/0x167 [ 1907.229770] should_fail.cold+0x5/0xa [ 1907.230600] ? create_object.isra.0+0x3a/0xa20 [ 1907.231564] should_failslab+0x5/0x20 [ 1907.232347] kmem_cache_alloc+0x5b/0x310 [ 1907.233201] create_object.isra.0+0x3a/0xa20 [ 1907.234094] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1907.235139] __kmalloc+0x16e/0x390 [ 1907.235857] ? lock_downgrade+0x6d0/0x6d0 [ 1907.236717] io_setup_async_rw+0x180/0x580 [ 1907.237580] io_read+0xe98/0x11e0 [ 1907.238297] ? register_lock_class+0xbb/0x17b0 [ 1907.239245] ? kiocb_done+0xc90/0xc90 [ 1907.240019] ? mark_lock+0xf5/0x2df0 [ 1907.240814] ? __lock_acquire+0xbb1/0x5b00 [ 1907.241679] io_issue_sqe+0x2e12/0x7660 [ 1907.242488] ? find_held_lock+0x2c/0x110 [ 1907.243340] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1907.244416] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1907.245369] ? lock_downgrade+0x6d0/0x6d0 [ 1907.246209] ? io_connect+0x610/0x610 [ 1907.247001] ? lock_acquire+0x197/0x470 [ 1907.247811] ? find_held_lock+0x2c/0x110 [ 1907.248661] ? __fget_files+0x26d/0x4c0 [ 1907.249484] ? lock_downgrade+0x6d0/0x6d0 [ 1907.250335] __io_queue_sqe+0x90/0x9d0 [ 1907.251143] ? io_issue_sqe+0x7660/0x7660 [ 1907.251971] ? io_prep_rw+0x7f5/0x1050 [ 1907.252788] io_submit_sqes+0x4461/0x85c0 [ 1907.253652] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1907.254686] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1907.255702] ? lock_downgrade+0x6d0/0x6d0 [ 1907.256557] ? find_held_lock+0x2c/0x110 [ 1907.257404] ? io_submit_sqes+0x85c0/0x85c0 [ 1907.258291] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1907.259313] ? wait_for_completion_io+0x270/0x270 [ 1907.260314] ? rcu_read_lock_any_held+0x75/0xa0 [ 1907.261264] ? vfs_write+0x354/0xa70 [ 1907.262015] ? fput_many+0x2f/0x1a0 [ 1907.262790] ? ksys_write+0x1a9/0x260 [ 1907.263560] ? __ia32_sys_read+0xb0/0xb0 [ 1907.264416] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1907.265471] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1907.266558] do_syscall_64+0x33/0x40 [ 1907.267522] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1907.268817] RIP: 0033:0x7effa61f4b19 [ 1907.269754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1907.273904] RSP: 002b:00007effa376a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1907.275481] RAX: ffffffffffffffda RBX: 00007effa6307f60 RCX: 00007effa61f4b19 [ 1907.276934] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1907.278382] RBP: 00007effa376a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1907.279841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1907.281304] R13: 00007ffd0f4a831f R14: 00007effa376a300 R15: 0000000000022000 14:56:04 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:56:04 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x110, r3, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000180)=[{&(0x7f0000000340)=""/169, 0xa9}], 0x1, &(0x7f0000000400)=""/133, 0x85}, 0x0, 0x2040, 0x0, {0x2}}, 0x9) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:56:04 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x30, 0x0, 0x0) 14:56:04 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 67) 14:56:04 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x36, 0x0, 0x0) [ 1907.437057] FAULT_INJECTION: forcing a failure. [ 1907.437057] name failslab, interval 1, probability 0, space 0, times 0 [ 1907.438315] CPU: 1 PID: 10073 Comm: syz-executor.4 Not tainted 5.10.181 #1 [ 1907.439086] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1907.439979] Call Trace: [ 1907.440265] dump_stack+0x107/0x167 [ 1907.440652] should_fail.cold+0x5/0xa [ 1907.441069] ? __io_queue_sqe+0x666/0x9d0 [ 1907.441518] should_failslab+0x5/0x20 [ 1907.441921] kmem_cache_alloc_trace+0x55/0x320 [ 1907.442416] __io_queue_sqe+0x666/0x9d0 [ 1907.442864] ? io_issue_sqe+0x7660/0x7660 [ 1907.443309] ? io_prep_rw+0x7f5/0x1050 [ 1907.443722] io_submit_sqes+0x4461/0x85c0 [ 1907.444174] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1907.444713] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1907.445228] ? lock_downgrade+0x6d0/0x6d0 [ 1907.445669] ? find_held_lock+0x2c/0x110 [ 1907.446109] ? io_submit_sqes+0x85c0/0x85c0 [ 1907.446568] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1907.447085] ? wait_for_completion_io+0x270/0x270 [ 1907.447602] ? rcu_read_lock_any_held+0x75/0xa0 [ 1907.448126] ? vfs_write+0x354/0xa70 [ 1907.448540] ? fput_many+0x2f/0x1a0 [ 1907.448942] ? ksys_write+0x1a9/0x260 [ 1907.449365] ? __ia32_sys_read+0xb0/0xb0 [ 1907.449809] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1907.450403] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1907.450978] do_syscall_64+0x33/0x40 [ 1907.451387] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1907.451953] RIP: 0033:0x7fae80968b19 [ 1907.452368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1907.454375] RSP: 002b:00007fae7dede188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1907.455234] RAX: ffffffffffffffda RBX: 00007fae80a7bf60 RCX: 00007fae80968b19 [ 1907.456016] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1907.456785] RBP: 00007fae7dede1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1907.457567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1907.458332] R13: 00007fffa57e443f R14: 00007fae7dede300 R15: 0000000000022000 14:56:04 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:56:04 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:56:05 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3c, 0x0, 0x0) 14:56:19 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x600, 0x0, 0x0) 14:56:19 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000) 14:56:19 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:56:19 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:56:19 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={r7, r8+10000000}}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r9, 0x40603d10, &(0x7f0000000200)) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd=r9, 0xffffffffffffffa0, 0x0, 0x1, 0x0, 0x1}, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:56:19 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 68) 14:56:19 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x600, 0x0, 0x0, 0x0) 14:56:19 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) [ 1922.500729] FAULT_INJECTION: forcing a failure. [ 1922.500729] name failslab, interval 1, probability 0, space 0, times 0 [ 1922.502107] CPU: 1 PID: 10108 Comm: syz-executor.4 Not tainted 5.10.181 #1 [ 1922.502852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1922.503814] Call Trace: [ 1922.504117] dump_stack+0x107/0x167 [ 1922.504517] should_fail.cold+0x5/0xa [ 1922.504938] ? create_object.isra.0+0x3a/0xa20 [ 1922.505437] should_failslab+0x5/0x20 [ 1922.505837] kmem_cache_alloc+0x5b/0x310 [ 1922.506275] create_object.isra.0+0x3a/0xa20 [ 1922.506751] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1922.507307] __kmalloc+0x16e/0x390 [ 1922.507701] ? lock_downgrade+0x6d0/0x6d0 [ 1922.508195] io_setup_async_rw+0x180/0x580 [ 1922.508677] io_read+0xe98/0x11e0 [ 1922.509054] ? kiocb_done+0xc90/0xc90 [ 1922.509479] ? mark_lock+0xf5/0x2df0 [ 1922.509933] ? __lock_acquire+0xbb1/0x5b00 [ 1922.510403] io_issue_sqe+0x2e12/0x7660 [ 1922.510852] ? find_held_lock+0x2c/0x110 [ 1922.511344] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1922.511389] FAULT_INJECTION: forcing a failure. [ 1922.511389] name failslab, interval 1, probability 0, space 0, times 0 [ 1922.511962] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1922.511973] ? lock_downgrade+0x6d0/0x6d0 [ 1922.511982] ? io_connect+0x610/0x610 [ 1922.511995] ? lock_acquire+0x197/0x470 [ 1922.512004] ? find_held_lock+0x2c/0x110 [ 1922.512016] ? __fget_files+0x26d/0x4c0 [ 1922.512027] ? lock_downgrade+0x6d0/0x6d0 [ 1922.512046] __io_queue_sqe+0x90/0x9d0 [ 1922.518091] ? io_issue_sqe+0x7660/0x7660 [ 1922.518548] ? io_prep_rw+0x7f5/0x1050 [ 1922.518970] io_submit_sqes+0x4461/0x85c0 [ 1922.519438] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1922.519975] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1922.520497] ? lock_downgrade+0x6d0/0x6d0 [ 1922.520935] ? find_held_lock+0x2c/0x110 [ 1922.521373] ? io_submit_sqes+0x85c0/0x85c0 [ 1922.521850] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1922.522384] ? wait_for_completion_io+0x270/0x270 [ 1922.522903] ? rcu_read_lock_any_held+0x75/0xa0 [ 1922.523471] ? vfs_write+0x354/0xa70 [ 1922.523881] ? fput_many+0x2f/0x1a0 [ 1922.524294] ? ksys_write+0x1a9/0x260 [ 1922.524708] ? __ia32_sys_read+0xb0/0xb0 [ 1922.525169] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1922.525773] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1922.526390] do_syscall_64+0x33/0x40 [ 1922.526802] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1922.527367] RIP: 0033:0x7fae80968b19 [ 1922.527788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1922.529737] RSP: 002b:00007fae7dede188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1922.530542] RAX: ffffffffffffffda RBX: 00007fae80a7bf60 RCX: 00007fae80968b19 [ 1922.531365] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1922.532153] RBP: 00007fae7dede1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1922.532953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1922.533747] R13: 00007fffa57e443f R14: 00007fae7dede300 R15: 0000000000022000 [ 1922.534543] CPU: 0 PID: 10111 Comm: syz-executor.6 Not tainted 5.10.181 #1 [ 1922.536099] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1922.538048] Call Trace: [ 1922.538628] dump_stack+0x107/0x167 [ 1922.539421] should_fail.cold+0x5/0xa [ 1922.540234] ? __io_queue_sqe+0x666/0x9d0 [ 1922.541276] should_failslab+0x5/0x20 [ 1922.542098] kmem_cache_alloc_trace+0x55/0x320 [ 1922.543111] __io_queue_sqe+0x666/0x9d0 [ 1922.543971] ? io_issue_sqe+0x7660/0x7660 [ 1922.544872] ? io_prep_rw+0x7f5/0x1050 [ 1922.545712] io_submit_sqes+0x4461/0x85c0 [ 1922.546632] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1922.547734] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1922.548767] ? lock_downgrade+0x6d0/0x6d0 [ 1922.549658] ? find_held_lock+0x2c/0x110 [ 1922.550560] ? io_submit_sqes+0x85c0/0x85c0 [ 1922.551532] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1922.552652] ? wait_for_completion_io+0x270/0x270 [ 1922.553712] ? rcu_read_lock_any_held+0x75/0xa0 [ 1922.554796] ? vfs_write+0x354/0xa70 [ 1922.555647] ? fput_many+0x2f/0x1a0 [ 1922.556509] ? ksys_write+0x1a9/0x260 [ 1922.557344] ? __ia32_sys_read+0xb0/0xb0 [ 1922.558409] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1922.559632] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1922.560821] do_syscall_64+0x33/0x40 [ 1922.561811] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1922.563231] RIP: 0033:0x7effa61f4b19 [ 1922.564238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1922.569188] RSP: 002b:00007effa376a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1922.571167] RAX: ffffffffffffffda RBX: 00007effa6307f60 RCX: 00007effa61f4b19 [ 1922.573055] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1922.574988] RBP: 00007effa376a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1922.576896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1922.578794] R13: 00007ffd0f4a831f R14: 00007effa376a300 R15: 0000000000022000 14:56:20 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:56:20 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:56:20 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:56:20 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:56:31 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc00, 0x0, 0x0, 0x0) 14:56:31 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xc00, 0x0, 0x0) 14:56:31 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 69) [ 1933.715859] FAULT_INJECTION: forcing a failure. [ 1933.715859] name failslab, interval 1, probability 0, space 0, times 0 [ 1933.717202] CPU: 1 PID: 10138 Comm: syz-executor.6 Not tainted 5.10.181 #1 [ 1933.717963] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1933.718880] Call Trace: [ 1933.719197] dump_stack+0x107/0x167 [ 1933.719608] should_fail.cold+0x5/0xa [ 1933.720030] ? create_object.isra.0+0x3a/0xa20 [ 1933.720527] should_failslab+0x5/0x20 [ 1933.720947] kmem_cache_alloc+0x5b/0x310 [ 1933.721391] create_object.isra.0+0x3a/0xa20 [ 1933.721873] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1933.722440] kmem_cache_alloc_trace+0x151/0x320 [ 1933.722958] __io_queue_sqe+0x666/0x9d0 [ 1933.723409] ? io_issue_sqe+0x7660/0x7660 [ 1933.723876] ? io_prep_rw+0x7f5/0x1050 [ 1933.724310] io_submit_sqes+0x4461/0x85c0 [ 1933.724779] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1933.725341] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1933.725874] ? lock_downgrade+0x6d0/0x6d0 [ 1933.726337] ? find_held_lock+0x2c/0x110 [ 1933.726791] ? io_submit_sqes+0x85c0/0x85c0 [ 1933.727284] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1933.727822] ? wait_for_completion_io+0x270/0x270 [ 1933.728362] ? rcu_read_lock_any_held+0x75/0xa0 [ 1933.728880] ? vfs_write+0x354/0xa70 [ 1933.729293] ? fput_many+0x2f/0x1a0 [ 1933.729696] ? ksys_write+0x1a9/0x260 [ 1933.730119] ? __ia32_sys_read+0xb0/0xb0 [ 1933.730566] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1933.731164] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1933.731729] do_syscall_64+0x33/0x40 [ 1933.732129] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1933.732693] RIP: 0033:0x7effa61f4b19 [ 1933.733097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1933.735124] RSP: 002b:00007effa376a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 14:56:31 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) 14:56:31 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:56:31 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 14:56:31 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:56:31 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x2044, &(0x7f0000000080)={0x0, 0x4388, 0x2, 0x2, 0x267, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r4, 0x40603d10, &(0x7f0000000200)) syz_io_uring_submit(r3, r2, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x5, 0x0, 0x0, 0x9, 0x1, 0x1, {0x0, 0x0, r4}}, 0x818) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) prlimit64(0x0, 0x0, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x7}, &(0x7f0000000100)) prlimit64(0x0, 0xc, 0x0, &(0x7f0000000140)) io_setup(0x2d47, &(0x7f0000000000)) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) close(r5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1933.735960] RAX: ffffffffffffffda RBX: 00007effa6307f60 RCX: 00007effa61f4b19 [ 1933.737126] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1933.737915] RBP: 00007effa376a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1933.738683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1933.739457] R13: 00007ffd0f4a831f R14: 00007effa376a300 R15: 0000000000022000 [ 1933.740589] FAULT_INJECTION: forcing a failure. [ 1933.740589] name failslab, interval 1, probability 0, space 0, times 0 [ 1933.743013] CPU: 0 PID: 10141 Comm: syz-executor.4 Not tainted 5.10.181 #1 [ 1933.744444] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1933.746129] Call Trace: [ 1933.746674] dump_stack+0x107/0x167 [ 1933.747433] should_fail.cold+0x5/0xa [ 1933.748223] ? __io_queue_sqe+0x666/0x9d0 [ 1933.749076] should_failslab+0x5/0x20 [ 1933.749857] kmem_cache_alloc_trace+0x55/0x320 [ 1933.750808] __io_queue_sqe+0x666/0x9d0 [ 1933.751651] ? io_issue_sqe+0x7660/0x7660 [ 1933.752510] ? io_prep_rw+0x7f5/0x1050 [ 1933.753312] io_submit_sqes+0x4461/0x85c0 [ 1933.754196] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1933.755230] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1933.756221] ? lock_downgrade+0x6d0/0x6d0 [ 1933.757065] ? find_held_lock+0x2c/0x110 [ 1933.757906] ? io_submit_sqes+0x85c0/0x85c0 [ 1933.758792] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1933.759812] ? wait_for_completion_io+0x270/0x270 [ 1933.760817] ? rcu_read_lock_any_held+0x75/0xa0 [ 1933.761774] ? vfs_write+0x354/0xa70 [ 1933.762546] ? fput_many+0x2f/0x1a0 [ 1933.763304] ? ksys_write+0x1a9/0x260 [ 1933.764085] ? __ia32_sys_read+0xb0/0xb0 [ 1933.764932] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1933.766018] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1933.767099] do_syscall_64+0x33/0x40 [ 1933.767871] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1933.768931] RIP: 0033:0x7fae80968b19 [ 1933.769698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1933.773410] RSP: 002b:00007fae7dede188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1933.774952] RAX: ffffffffffffffda RBX: 00007fae80a7bf60 RCX: 00007fae80968b19 [ 1933.776404] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1933.777836] RBP: 00007fae7dede1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1933.779282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1933.780714] R13: 00007fffa57e443f R14: 00007fae7dede300 R15: 0000000000022000 14:56:31 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:56:31 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(r6, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r7}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(r6, r5, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(r5, 0x4b65, 0x2) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3f}}, './file0\x00'}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:56:31 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:56:31 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:56:31 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1200, 0x0, 0x0) 14:56:31 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:56:31 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:56:31 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1200, 0x0, 0x0, 0x0) 14:56:31 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1800, 0x0, 0x0) 14:56:31 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:56:31 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:56:48 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1800, 0x0, 0x0, 0x0) 14:56:48 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r3, 0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x40000, 0x12345}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:56:48 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 14:56:48 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1e00, 0x0, 0x0) 14:56:48 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 70) 14:56:48 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:56:48 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:56:49 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={r6, r7+10000000}}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x6004, @fd_index=0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, {0x2, r8}}, 0x2) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x2, 0x0, r3, &(0x7f0000000340), &(0x7f0000000080)='./file0\x00', 0x80, 0x2000, 0x0, {0x0, r8}}, 0x2) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1951.550538] FAULT_INJECTION: forcing a failure. [ 1951.550538] name failslab, interval 1, probability 0, space 0, times 0 [ 1951.551934] CPU: 1 PID: 10201 Comm: syz-executor.6 Not tainted 5.10.181 #1 [ 1951.552731] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1951.553686] Call Trace: [ 1951.553995] dump_stack+0x107/0x167 [ 1951.554416] should_fail.cold+0x5/0xa [ 1951.554854] ? io_setup_async_rw+0x180/0x580 [ 1951.555367] should_failslab+0x5/0x20 [ 1951.555812] __kmalloc+0x72/0x390 [ 1951.556215] ? lock_downgrade+0x6d0/0x6d0 [ 1951.556698] io_setup_async_rw+0x180/0x580 [ 1951.557193] io_read+0xe98/0x11e0 [ 1951.557601] ? kiocb_done+0xc90/0xc90 [ 1951.558053] ? mark_lock+0xf5/0x2df0 [ 1951.558492] ? __lock_acquire+0xbb1/0x5b00 [ 1951.558978] io_issue_sqe+0x2e12/0x7660 [ 1951.559445] ? find_held_lock+0x2c/0x110 [ 1951.559910] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1951.560507] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1951.561060] ? lock_downgrade+0x6d0/0x6d0 [ 1951.561526] ? io_connect+0x610/0x610 [ 1951.561957] ? lock_acquire+0x197/0x470 [ 1951.562406] ? find_held_lock+0x2c/0x110 [ 1951.562861] ? __fget_files+0x26d/0x4c0 [ 1951.563323] ? lock_downgrade+0x6d0/0x6d0 [ 1951.563792] __io_queue_sqe+0x90/0x9d0 [ 1951.564238] ? io_issue_sqe+0x7660/0x7660 [ 1951.564703] ? io_prep_rw+0x7f5/0x1050 [ 1951.565150] io_submit_sqes+0x4461/0x85c0 [ 1951.565631] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1951.566190] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1951.566733] ? lock_downgrade+0x6d0/0x6d0 [ 1951.567198] ? find_held_lock+0x2c/0x110 [ 1951.567665] ? io_submit_sqes+0x85c0/0x85c0 [ 1951.568152] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1951.568687] ? wait_for_completion_io+0x270/0x270 [ 1951.569234] ? rcu_read_lock_any_held+0x75/0xa0 [ 1951.569752] ? vfs_write+0x354/0xa70 [ 1951.570168] ? fput_many+0x2f/0x1a0 [ 1951.570577] ? ksys_write+0x1a9/0x260 [ 1951.571009] ? __ia32_sys_read+0xb0/0xb0 [ 1951.571477] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1951.572059] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1951.572635] do_syscall_64+0x33/0x40 [ 1951.573054] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1951.573632] RIP: 0033:0x7effa61f4b19 [ 1951.574020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1951.576105] RSP: 002b:00007effa376a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1951.576958] RAX: ffffffffffffffda RBX: 00007effa6307f60 RCX: 00007effa61f4b19 [ 1951.577673] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1951.578480] RBP: 00007effa376a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1951.579295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1951.580096] R13: 00007ffd0f4a831f R14: 00007effa376a300 R15: 0000000000022000 14:56:49 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1951.619743] FAULT_INJECTION: forcing a failure. [ 1951.619743] name failslab, interval 1, probability 0, space 0, times 0 [ 1951.622206] CPU: 0 PID: 10200 Comm: syz-executor.4 Not tainted 5.10.181 #1 [ 1951.623686] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1951.625437] Call Trace: [ 1951.626006] dump_stack+0x107/0x167 [ 1951.626789] should_fail.cold+0x5/0xa [ 1951.627645] ? create_object.isra.0+0x3a/0xa20 [ 1951.628615] should_failslab+0x5/0x20 [ 1951.629418] kmem_cache_alloc+0x5b/0x310 [ 1951.630283] create_object.isra.0+0x3a/0xa20 [ 1951.631212] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1951.632306] kmem_cache_alloc_trace+0x151/0x320 [ 1951.633301] __io_queue_sqe+0x666/0x9d0 [ 1951.634158] ? io_issue_sqe+0x7660/0x7660 [ 1951.635040] ? io_prep_rw+0x7f5/0x1050 [ 1951.635882] io_submit_sqes+0x4461/0x85c0 [ 1951.636796] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1951.637850] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1951.638870] ? lock_downgrade+0x6d0/0x6d0 [ 1951.639756] ? find_held_lock+0x2c/0x110 [ 1951.640618] ? io_submit_sqes+0x85c0/0x85c0 [ 1951.641540] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1951.642563] ? wait_for_completion_io+0x270/0x270 [ 1951.643597] ? rcu_read_lock_any_held+0x75/0xa0 [ 1951.644583] ? vfs_write+0x354/0xa70 [ 1951.645374] ? fput_many+0x2f/0x1a0 14:56:49 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1951.646139] ? ksys_write+0x1a9/0x260 [ 1951.647084] ? __ia32_sys_read+0xb0/0xb0 [ 1951.647993] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1951.649125] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1951.650242] do_syscall_64+0x33/0x40 [ 1951.651044] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1951.652153] RIP: 0033:0x7fae80968b19 [ 1951.652963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1951.656946] RSP: 002b:00007fae7dede188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1951.658593] RAX: ffffffffffffffda RBX: 00007fae80a7bf60 RCX: 00007fae80968b19 [ 1951.660144] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1951.661662] RBP: 00007fae7dede1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1951.663187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1951.664707] R13: 00007fffa57e443f R14: 00007fae7dede300 R15: 0000000000022000 14:56:49 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:56:49 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) 14:56:49 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:56:49 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 14:56:49 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2400, 0x0, 0x0) [ 1951.830210] FAULT_INJECTION: forcing a failure. [ 1951.830210] name failslab, interval 1, probability 0, space 0, times 0 [ 1951.831545] CPU: 1 PID: 10224 Comm: syz-executor.6 Not tainted 5.10.181 #1 [ 1951.832287] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1951.833173] Call Trace: [ 1951.833468] dump_stack+0x107/0x167 [ 1951.833863] should_fail.cold+0x5/0xa [ 1951.834276] ? create_object.isra.0+0x3a/0xa20 [ 1951.834764] should_failslab+0x5/0x20 [ 1951.835183] kmem_cache_alloc+0x5b/0x310 [ 1951.835634] create_object.isra.0+0x3a/0xa20 [ 1951.836099] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1951.836635] __kmalloc+0x16e/0x390 [ 1951.837016] ? lock_downgrade+0x6d0/0x6d0 [ 1951.837474] io_setup_async_rw+0x180/0x580 [ 1951.837921] io_read+0xe98/0x11e0 [ 1951.838300] ? kiocb_done+0xc90/0xc90 [ 1951.838716] ? mark_lock+0xf5/0x2df0 [ 1951.839138] ? __lock_acquire+0xbb1/0x5b00 [ 1951.839607] io_issue_sqe+0x2e12/0x7660 [ 1951.840029] ? find_held_lock+0x2c/0x110 [ 1951.840465] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1951.841031] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1951.841541] ? lock_downgrade+0x6d0/0x6d0 [ 1951.841990] ? io_connect+0x610/0x610 [ 1951.842415] ? lock_acquire+0x197/0x470 [ 1951.842840] ? find_held_lock+0x2c/0x110 [ 1951.843305] ? __fget_files+0x26d/0x4c0 [ 1951.843734] ? lock_downgrade+0x6d0/0x6d0 [ 1951.844185] __io_queue_sqe+0x90/0x9d0 [ 1951.844606] ? io_issue_sqe+0x7660/0x7660 [ 1951.845058] ? io_prep_rw+0x7f5/0x1050 [ 1951.845478] io_submit_sqes+0x4461/0x85c0 [ 1951.845940] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1951.846486] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1951.847005] ? lock_downgrade+0x6d0/0x6d0 [ 1951.847455] ? find_held_lock+0x2c/0x110 [ 1951.847886] ? io_submit_sqes+0x85c0/0x85c0 [ 1951.848357] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1951.848866] ? wait_for_completion_io+0x270/0x270 [ 1951.849381] ? rcu_read_lock_any_held+0x75/0xa0 [ 1951.849883] ? vfs_write+0x354/0xa70 [ 1951.850287] ? fput_many+0x2f/0x1a0 [ 1951.850672] ? ksys_write+0x1a9/0x260 [ 1951.851080] ? __ia32_sys_read+0xb0/0xb0 [ 1951.851531] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1951.852099] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1951.852665] do_syscall_64+0x33/0x40 [ 1951.853063] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1951.853626] RIP: 0033:0x7effa61f4b19 [ 1951.854031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1951.856077] RSP: 002b:00007effa376a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1951.856897] RAX: ffffffffffffffda RBX: 00007effa6307f60 RCX: 00007effa61f4b19 [ 1951.857672] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1951.858432] RBP: 00007effa376a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1951.859198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1951.859978] R13: 00007ffd0f4a831f R14: 00007effa376a300 R15: 0000000000022000 14:56:49 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:56:49 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:57:01 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e00, 0x0, 0x0, 0x0) 14:57:01 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=ANY=[@ANYBLOB="60010000100001002cbd700000000000ff0200000000000000000000000000000000000000000000020000a000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e01010000000000000000000000000000000032000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000a000004000000000000000070001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002001000040000000976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"], 0x160}}, 0x0) sendfile(r6, r5, &(0x7f0000000140)=0x7, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1, 0x9, 0x9) ioctl$KDSKBLED(r5, 0x4b65, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20010, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:57:01 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:57:01 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2a00, 0x0, 0x0) 14:57:01 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:57:01 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0xe4e, 0xd024, 0x2, &(0x7f0000000080)={[0x9]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1964.026866] FAULT_INJECTION: forcing a failure. [ 1964.026866] name failslab, interval 1, probability 0, space 0, times 0 [ 1964.028188] CPU: 1 PID: 10251 Comm: syz-executor.4 Not tainted 5.10.181 #1 [ 1964.028941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1964.029812] Call Trace: [ 1964.030104] dump_stack+0x107/0x167 [ 1964.030496] should_fail.cold+0x5/0xa [ 1964.030909] ? io_setup_async_rw+0x180/0x580 [ 1964.031381] should_failslab+0x5/0x20 [ 1964.031800] __kmalloc+0x72/0x390 [ 1964.032173] ? lock_downgrade+0x6d0/0x6d0 [ 1964.032624] io_setup_async_rw+0x180/0x580 [ 1964.033083] io_read+0xe98/0x11e0 [ 1964.033469] ? kiocb_done+0xc90/0xc90 [ 1964.033886] ? mark_lock+0xf5/0x2df0 [ 1964.034310] ? __lock_acquire+0xbb1/0x5b00 [ 1964.034770] io_issue_sqe+0x2e12/0x7660 [ 1964.035200] ? find_held_lock+0x2c/0x110 [ 1964.035661] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1964.036238] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1964.036748] ? lock_downgrade+0x6d0/0x6d0 [ 1964.037202] ? io_connect+0x610/0x610 [ 1964.037478] FAULT_INJECTION: forcing a failure. [ 1964.037478] name failslab, interval 1, probability 0, space 0, times 0 [ 1964.037625] ? lock_acquire+0x197/0x470 [ 1964.040437] ? find_held_lock+0x2c/0x110 [ 1964.040880] ? __fget_files+0x26d/0x4c0 [ 1964.041316] ? lock_downgrade+0x6d0/0x6d0 [ 1964.041771] __io_queue_sqe+0x90/0x9d0 [ 1964.042199] ? io_issue_sqe+0x7660/0x7660 [ 1964.042645] ? io_prep_rw+0x7f5/0x1050 [ 1964.043068] io_submit_sqes+0x4461/0x85c0 [ 1964.043544] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1964.044077] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1964.044595] ? lock_downgrade+0x6d0/0x6d0 [ 1964.045046] ? find_held_lock+0x2c/0x110 [ 1964.045480] ? io_submit_sqes+0x85c0/0x85c0 [ 1964.045953] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1964.046469] ? wait_for_completion_io+0x270/0x270 [ 1964.046994] ? rcu_read_lock_any_held+0x75/0xa0 [ 1964.047496] ? vfs_write+0x354/0xa70 [ 1964.047900] ? fput_many+0x2f/0x1a0 [ 1964.048297] ? ksys_write+0x1a9/0x260 [ 1964.048707] ? __ia32_sys_read+0xb0/0xb0 [ 1964.049149] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1964.049718] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1964.050285] do_syscall_64+0x33/0x40 [ 1964.050692] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1964.051250] RIP: 0033:0x7fae80968b19 [ 1964.051670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1964.053653] RSP: 002b:00007fae7dede188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1964.054473] RAX: ffffffffffffffda RBX: 00007fae80a7bf60 RCX: 00007fae80968b19 [ 1964.055237] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1964.056019] RBP: 00007fae7dede1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1964.056784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1964.057557] R13: 00007fffa57e443f R14: 00007fae7dede300 R15: 0000000000022000 [ 1964.058349] CPU: 0 PID: 10252 Comm: syz-executor.6 Not tainted 5.10.181 #1 [ 1964.059862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1964.061631] Call Trace: [ 1964.062208] dump_stack+0x107/0x167 [ 1964.062992] should_fail.cold+0x5/0xa 14:57:01 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 71) 14:57:01 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) [ 1964.063830] ? __io_queue_sqe+0x666/0x9d0 [ 1964.064875] should_failslab+0x5/0x20 [ 1964.065686] kmem_cache_alloc_trace+0x55/0x320 [ 1964.066664] __io_queue_sqe+0x666/0x9d0 [ 1964.067527] ? io_issue_sqe+0x7660/0x7660 [ 1964.068422] ? io_prep_rw+0x7f5/0x1050 [ 1964.069253] io_submit_sqes+0x4461/0x85c0 [ 1964.070170] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1964.071238] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1964.072296] ? lock_downgrade+0x6d0/0x6d0 [ 1964.073173] ? find_held_lock+0x2c/0x110 [ 1964.074035] ? io_submit_sqes+0x85c0/0x85c0 [ 1964.074969] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1964.076014] ? wait_for_completion_io+0x270/0x270 [ 1964.077082] ? rcu_read_lock_any_held+0x75/0xa0 [ 1964.078064] ? vfs_write+0x354/0xa70 [ 1964.078861] ? fput_many+0x2f/0x1a0 [ 1964.079643] ? ksys_write+0x1a9/0x260 [ 1964.080453] ? __ia32_sys_read+0xb0/0xb0 [ 1964.081323] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1964.082441] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1964.083565] do_syscall_64+0x33/0x40 [ 1964.084377] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1964.085512] RIP: 0033:0x7effa61f4b19 [ 1964.086349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1964.090335] RSP: 002b:00007effa376a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1964.091956] RAX: ffffffffffffffda RBX: 00007effa6307f60 RCX: 00007effa61f4b19 [ 1964.093458] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1964.094970] RBP: 00007effa376a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1964.096498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1964.098002] R13: 00007ffd0f4a831f R14: 00007effa376a300 R15: 0000000000022000 14:57:01 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:57:01 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:57:01 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x2044, &(0x7f0000000080)={0x0, 0x4388, 0x2, 0x2, 0x267, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r4, 0x40603d10, &(0x7f0000000200)) syz_io_uring_submit(r3, r2, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x5, 0x0, 0x0, 0x9, 0x1, 0x1, {0x0, 0x0, r4}}, 0x818) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) prlimit64(0x0, 0x0, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x7}, &(0x7f0000000100)) prlimit64(0x0, 0xc, 0x0, &(0x7f0000000140)) io_setup(0x2d47, &(0x7f0000000000)) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) close(r5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:57:01 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:57:01 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3000, 0x0, 0x0) 14:57:01 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:57:02 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3600, 0x0, 0x0) 14:57:02 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) [ 1964.700679] FAULT_INJECTION: forcing a failure. [ 1964.700679] name failslab, interval 1, probability 0, space 0, times 0 [ 1964.703354] CPU: 1 PID: 10293 Comm: syz-executor.3 Not tainted 5.10.181 #1 [ 1964.704930] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1964.706796] Call Trace: [ 1964.707396] dump_stack+0x107/0x167 [ 1964.708240] should_fail.cold+0x5/0xa [ 1964.709100] should_failslab+0x5/0x20 [ 1964.709951] kmem_cache_alloc_bulk+0x4b/0x320 [ 1964.710962] io_submit_sqes+0x6f76/0x85c0 [ 1964.711907] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1964.713007] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1964.714124] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1964.715201] ? lock_downgrade+0x6d0/0x6d0 [ 1964.716133] ? find_held_lock+0x2c/0x110 [ 1964.717042] ? io_submit_sqes+0x85c0/0x85c0 [ 1964.718021] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1964.719095] ? wait_for_completion_io+0x270/0x270 [ 1964.720200] ? rcu_read_lock_any_held+0x75/0xa0 [ 1964.721233] ? vfs_write+0x354/0xa70 [ 1964.722072] ? fput_many+0x2f/0x1a0 [ 1964.722887] ? ksys_write+0x1a9/0x260 [ 1964.723750] ? __ia32_sys_read+0xb0/0xb0 [ 1964.724660] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1964.725837] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1964.726994] do_syscall_64+0x33/0x40 [ 1964.727839] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1964.728980] RIP: 0033:0x7fba42b8db19 [ 1964.729816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1964.733926] RSP: 002b:00007fba40103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1964.735643] RAX: ffffffffffffffda RBX: 00007fba42ca0f60 RCX: 00007fba42b8db19 [ 1964.737238] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1964.738827] RBP: 00007fba401031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1964.740443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1964.742041] R13: 00007ffd03a0608f R14: 00007fba40103300 R15: 0000000000022000 [ 1964.963134] DRBG: could not allocate digest TFM handle: hmac(sha256) [ 1964.972828] DRBG: could not allocate digest TFM handle: hmac(sha256) 14:57:15 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:57:15 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 14:57:15 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 14:57:15 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 72) [ 1977.855376] FAULT_INJECTION: forcing a failure. [ 1977.855376] name failslab, interval 1, probability 0, space 0, times 0 [ 1977.856683] CPU: 1 PID: 10317 Comm: syz-executor.3 Not tainted 5.10.181 #1 [ 1977.857428] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1977.858330] Call Trace: [ 1977.858627] dump_stack+0x107/0x167 [ 1977.859018] should_fail.cold+0x5/0xa [ 1977.859437] ? create_object.isra.0+0x3a/0xa20 [ 1977.859962] should_failslab+0x5/0x20 [ 1977.860376] kmem_cache_alloc+0x5b/0x310 [ 1977.860812] create_object.isra.0+0x3a/0xa20 [ 1977.861285] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1977.861830] kmem_cache_alloc_bulk+0x168/0x320 [ 1977.862331] io_submit_sqes+0x6f76/0x85c0 [ 1977.862783] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1977.863306] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1977.863852] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1977.864382] ? lock_downgrade+0x6d0/0x6d0 [ 1977.864837] ? find_held_lock+0x2c/0x110 [ 1977.865300] ? io_submit_sqes+0x85c0/0x85c0 [ 1977.865790] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1977.866329] ? wait_for_completion_io+0x270/0x270 [ 1977.866885] ? rcu_read_lock_any_held+0x75/0xa0 [ 1977.867403] ? vfs_write+0x354/0xa70 [ 1977.867834] ? fput_many+0x2f/0x1a0 [ 1977.868247] ? ksys_write+0x1a9/0x260 [ 1977.868680] ? __ia32_sys_read+0xb0/0xb0 [ 1977.869146] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1977.869739] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1977.870341] do_syscall_64+0x33/0x40 [ 1977.870768] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1977.871356] RIP: 0033:0x7fba42b8db19 [ 1977.871793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1977.873867] RSP: 002b:00007fba40103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1977.874692] RAX: ffffffffffffffda RBX: 00007fba42ca0f60 RCX: 00007fba42b8db19 [ 1977.875485] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1977.876298] RBP: 00007fba401031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1977.877104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1977.877893] R13: 00007ffd03a0608f R14: 00007fba40103300 R15: 0000000000022000 14:57:15 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3c00, 0x0, 0x0) 14:57:15 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:57:15 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x18, 0x0, {0x1}}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:57:15 executing program 1: r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) semop(r0, &(0x7f0000000080)=[{0x2, 0x6, 0x1000}, {0x2}, {0x2, 0x2}, {0x0, 0x6, 0x800}, {0x1, 0x1, 0x800}, {0x1, 0x4, 0x800}, {0x1, 0x9, 0x800}], 0x7) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) close(r4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:57:15 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1977.924803] FAULT_INJECTION: forcing a failure. [ 1977.924803] name failslab, interval 1, probability 0, space 0, times 0 [ 1977.927383] CPU: 0 PID: 10327 Comm: syz-executor.4 Not tainted 5.10.181 #1 [ 1977.928945] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1977.930796] Call Trace: [ 1977.931399] dump_stack+0x107/0x167 [ 1977.932248] should_fail.cold+0x5/0xa [ 1977.933099] ? create_object.isra.0+0x3a/0xa20 [ 1977.934124] should_failslab+0x5/0x20 [ 1977.934968] kmem_cache_alloc+0x5b/0x310 [ 1977.935879] create_object.isra.0+0x3a/0xa20 [ 1977.936848] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1977.937959] __kmalloc+0x16e/0x390 [ 1977.938750] io_setup_async_rw+0x180/0x580 [ 1977.939689] io_read+0xe98/0x11e0 [ 1977.940464] ? kiocb_done+0xc90/0xc90 [ 1977.941303] ? mark_lock+0xf5/0x2df0 [ 1977.942149] ? __lock_acquire+0xbb1/0x5b00 [ 1977.943078] io_issue_sqe+0x2e12/0x7660 [ 1977.943965] ? find_held_lock+0x2c/0x110 [ 1977.944845] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1977.945984] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1977.947012] ? lock_downgrade+0x6d0/0x6d0 [ 1977.947920] ? io_connect+0x610/0x610 [ 1977.948753] ? lock_acquire+0x197/0x470 [ 1977.949612] ? find_held_lock+0x2c/0x110 [ 1977.950501] ? __fget_files+0x26d/0x4c0 [ 1977.951369] ? lock_downgrade+0x6d0/0x6d0 [ 1977.952284] __io_queue_sqe+0x90/0x9d0 [ 1977.953141] ? io_issue_sqe+0x7660/0x7660 [ 1977.954045] ? io_prep_rw+0x7f5/0x1050 [ 1977.954893] io_submit_sqes+0x4461/0x85c0 [ 1977.955836] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1977.956928] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1977.957982] ? lock_downgrade+0x6d0/0x6d0 [ 1977.958875] ? find_held_lock+0x2c/0x110 [ 1977.959769] ? io_submit_sqes+0x85c0/0x85c0 [ 1977.960716] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1977.961763] ? wait_for_completion_io+0x270/0x270 [ 1977.962813] ? rcu_read_lock_any_held+0x75/0xa0 [ 1977.963839] ? vfs_write+0x354/0xa70 [ 1977.964645] ? fput_many+0x2f/0x1a0 [ 1977.965438] ? ksys_write+0x1a9/0x260 [ 1977.966266] ? __ia32_sys_read+0xb0/0xb0 [ 1977.967148] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1977.968301] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1977.969421] do_syscall_64+0x33/0x40 [ 1977.970228] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1977.971328] RIP: 0033:0x7fae80968b19 [ 1977.972159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1977.976130] RSP: 002b:00007fae7dede188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 14:57:15 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1977.977764] RAX: ffffffffffffffda RBX: 00007fae80a7bf60 RCX: 00007fae80968b19 [ 1977.979451] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1977.980997] RBP: 00007fae7dede1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1977.982515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1977.984073] R13: 00007fffa57e443f R14: 00007fae7dede300 R15: 0000000000022000 14:57:15 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x812d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:57:15 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0) 14:57:15 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) [ 1978.154640] FAULT_INJECTION: forcing a failure. [ 1978.154640] name failslab, interval 1, probability 0, space 0, times 0 [ 1978.155981] CPU: 1 PID: 10346 Comm: syz-executor.2 Not tainted 5.10.181 #1 [ 1978.156733] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1978.157641] Call Trace: [ 1978.157932] dump_stack+0x107/0x167 [ 1978.158333] should_fail.cold+0x5/0xa [ 1978.158750] should_failslab+0x5/0x20 [ 1978.159158] kmem_cache_alloc_bulk+0x4b/0x320 [ 1978.159666] io_submit_sqes+0x6f76/0x85c0 [ 1978.160109] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1978.160646] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1978.161180] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1978.161708] ? lock_downgrade+0x6d0/0x6d0 [ 1978.162158] ? find_held_lock+0x2c/0x110 [ 1978.162607] ? io_submit_sqes+0x85c0/0x85c0 [ 1978.163095] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1978.163637] ? wait_for_completion_io+0x270/0x270 [ 1978.164165] ? rcu_read_lock_any_held+0x75/0xa0 [ 1978.164669] ? vfs_write+0x354/0xa70 [ 1978.165078] ? fput_many+0x2f/0x1a0 [ 1978.165469] ? ksys_write+0x1a9/0x260 [ 1978.165869] ? __ia32_sys_read+0xb0/0xb0 [ 1978.166308] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1978.166863] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1978.167407] do_syscall_64+0x33/0x40 [ 1978.167814] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1978.168377] RIP: 0033:0x7fd0429e4b19 [ 1978.168773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1978.170716] RSP: 002b:00007fd03ff5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1978.171528] RAX: ffffffffffffffda RBX: 00007fd042af7f60 RCX: 00007fd0429e4b19 [ 1978.172314] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1978.173104] RBP: 00007fd03ff5a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1978.173865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1978.174643] R13: 00007ffda38c770f R14: 00007fd03ff5a300 R15: 0000000000022000 14:57:15 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2400, 0x0, 0x0, 0x0) 14:57:15 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) [ 1978.268314] FAULT_INJECTION: forcing a failure. [ 1978.268314] name failslab, interval 1, probability 0, space 0, times 0 [ 1978.269636] CPU: 1 PID: 10356 Comm: syz-executor.3 Not tainted 5.10.181 #1 [ 1978.270399] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1978.271324] Call Trace: [ 1978.271631] dump_stack+0x107/0x167 [ 1978.272055] should_fail.cold+0x5/0xa [ 1978.272492] ? create_object.isra.0+0x3a/0xa20 [ 1978.272999] should_failslab+0x5/0x20 [ 1978.273428] kmem_cache_alloc+0x5b/0x310 [ 1978.273896] ? mark_held_locks+0x9e/0xe0 [ 1978.274348] create_object.isra.0+0x3a/0xa20 [ 1978.274835] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1978.275389] kmem_cache_alloc_bulk+0x168/0x320 [ 1978.275928] io_submit_sqes+0x6f76/0x85c0 [ 1978.276389] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1978.276945] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1978.277475] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1978.278020] ? lock_downgrade+0x6d0/0x6d0 [ 1978.278479] ? find_held_lock+0x2c/0x110 [ 1978.278937] ? io_submit_sqes+0x85c0/0x85c0 [ 1978.279413] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1978.279974] ? wait_for_completion_io+0x270/0x270 [ 1978.280498] ? rcu_read_lock_any_held+0x75/0xa0 [ 1978.281011] ? vfs_write+0x354/0xa70 [ 1978.281419] ? fput_many+0x2f/0x1a0 [ 1978.281824] ? ksys_write+0x1a9/0x260 [ 1978.282235] ? __ia32_sys_read+0xb0/0xb0 [ 1978.282693] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1978.283253] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1978.283849] do_syscall_64+0x33/0x40 [ 1978.284254] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1978.284825] RIP: 0033:0x7fba42b8db19 [ 1978.285232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1978.287321] RSP: 002b:00007fba40103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1978.288153] RAX: ffffffffffffffda RBX: 00007fba42ca0f60 RCX: 00007fba42b8db19 [ 1978.288949] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1978.289745] RBP: 00007fba401031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1978.290550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1978.291343] R13: 00007ffd03a0608f R14: 00007fba40103300 R15: 0000000000022000 14:57:15 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x6000000, 0x0, 0x0) 14:57:29 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2004, @fd_index=0xa}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000580)=ANY=[@ANYBLOB="010000001300000018000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) ioctl$PIO_FONTRESET(r5, 0x4b6d, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={r8, r9+10000000}}, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r4, r7, &(0x7f0000000540)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/69, 0x45}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000180)=""/60, 0x3c}, {&(0x7f00000001c0)=""/5, 0x5}], 0x4, &(0x7f0000000440)=""/223, 0xdf}, 0x0, 0x2000, 0x1, {0x1}}, 0x1ff) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_complete(r6) 14:57:29 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a00, 0x0, 0x0, 0x0) 14:57:29 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 14:57:29 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 73) 14:57:29 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 14:57:29 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x7f, 0x200}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f81c7352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362a71239010daeda166aef7020100000047b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf00000000000000", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(r6, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=ANY=[@ANYBLOB="60010000100001002cbd700000000000ff020000000000000000000000000001fc0000000000000000000000000000000000000000000000020000a000000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="ac1e01010000000000000000000000000000000032000000e000000100000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba168d95f7143dadea20b700000000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000a000004000000000000000070001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002001000040000000976ae46d07d1812fd0664e95dee18314b91df2e10ff9815307"], 0x160}}, 0x0) sendfile(r6, r5, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(r5, 0x4b65, 0x2) io_uring_enter(r5, 0x650, 0xfffffffe, 0x0, 0x0, 0xfffffffffffffdfd) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000011, 0x10, r0, 0x0) 14:57:29 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xc000000, 0x0, 0x0) 14:57:29 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1992.076645] FAULT_INJECTION: forcing a failure. [ 1992.076645] name failslab, interval 1, probability 0, space 0, times 0 [ 1992.078124] CPU: 1 PID: 10378 Comm: syz-executor.2 Not tainted 5.10.181 #1 [ 1992.078820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1992.079651] Call Trace: [ 1992.079936] dump_stack+0x107/0x167 [ 1992.080302] should_fail.cold+0x5/0xa [ 1992.080682] ? create_object.isra.0+0x3a/0xa20 [ 1992.081138] should_failslab+0x5/0x20 [ 1992.081521] kmem_cache_alloc+0x5b/0x310 [ 1992.081926] create_object.isra.0+0x3a/0xa20 [ 1992.082366] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1992.082871] kmem_cache_alloc_bulk+0x168/0x320 [ 1992.083330] io_submit_sqes+0x6f76/0x85c0 [ 1992.083745] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1992.084245] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1992.084740] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1992.085223] ? lock_downgrade+0x6d0/0x6d0 [ 1992.085638] ? find_held_lock+0x2c/0x110 [ 1992.086046] ? io_submit_sqes+0x85c0/0x85c0 [ 1992.086480] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1992.086961] ? wait_for_completion_io+0x270/0x270 [ 1992.087442] ? rcu_read_lock_any_held+0x75/0xa0 [ 1992.087918] ? vfs_write+0x354/0xa70 [ 1992.088293] ? fput_many+0x2f/0x1a0 [ 1992.088660] ? ksys_write+0x1a9/0x260 [ 1992.089040] ? __ia32_sys_read+0xb0/0xb0 [ 1992.089456] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1992.090017] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1992.090469] FAULT_INJECTION: forcing a failure. [ 1992.090469] name failslab, interval 1, probability 0, space 0, times 0 [ 1992.090579] do_syscall_64+0x33/0x40 [ 1992.093302] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1992.093848] RIP: 0033:0x7fd0429e4b19 [ 1992.094246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1992.096223] RSP: 002b:00007fd03ff5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1992.097037] RAX: ffffffffffffffda RBX: 00007fd042af7f60 RCX: 00007fd0429e4b19 [ 1992.097795] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1992.098553] RBP: 00007fd03ff5a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1992.099313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1992.100080] R13: 00007ffda38c770f R14: 00007fd03ff5a300 R15: 0000000000022000 [ 1992.100866] CPU: 0 PID: 10374 Comm: syz-executor.3 Not tainted 5.10.181 #1 [ 1992.102341] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1992.104104] Call Trace: [ 1992.104672] dump_stack+0x107/0x167 [ 1992.105564] should_fail.cold+0x5/0xa [ 1992.106376] ? create_object.isra.0+0x3a/0xa20 [ 1992.107346] should_failslab+0x5/0x20 [ 1992.108166] kmem_cache_alloc+0x5b/0x310 [ 1992.109023] ? mark_held_locks+0x9e/0xe0 [ 1992.109889] create_object.isra.0+0x3a/0xa20 [ 1992.110826] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1992.112059] kmem_cache_alloc_bulk+0x168/0x320 [ 1992.113025] io_submit_sqes+0x6f76/0x85c0 [ 1992.113903] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1992.114942] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1992.116002] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1992.117021] ? lock_downgrade+0x6d0/0x6d0 [ 1992.117889] ? find_held_lock+0x2c/0x110 [ 1992.118751] ? io_submit_sqes+0x85c0/0x85c0 [ 1992.119666] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1992.120706] ? wait_for_completion_io+0x270/0x270 [ 1992.121725] ? rcu_read_lock_any_held+0x75/0xa0 [ 1992.122703] ? vfs_write+0x354/0xa70 [ 1992.123491] ? fput_many+0x2f/0x1a0 [ 1992.124281] ? ksys_write+0x1a9/0x260 [ 1992.125086] ? __ia32_sys_read+0xb0/0xb0 [ 1992.125950] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1992.127257] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1992.128376] do_syscall_64+0x33/0x40 [ 1992.129337] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1992.130430] RIP: 0033:0x7fba42b8db19 [ 1992.131387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1992.135295] RSP: 002b:00007fba40103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 14:57:29 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x12000000, 0x0, 0x0) [ 1992.137263] RAX: ffffffffffffffda RBX: 00007fba42ca0f60 RCX: 00007fba42b8db19 [ 1992.138919] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1992.140446] RBP: 00007fba401031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1992.141958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1992.143470] R13: 00007ffd03a0608f R14: 00007fba40103300 R15: 0000000000022000 [ 1992.177230] FAULT_INJECTION: forcing a failure. [ 1992.177230] name failslab, interval 1, probability 0, space 0, times 0 [ 1992.180098] CPU: 0 PID: 10379 Comm: syz-executor.4 Not tainted 5.10.181 #1 [ 1992.181753] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1992.183722] Call Trace: [ 1992.184373] dump_stack+0x107/0x167 [ 1992.185250] should_fail.cold+0x5/0xa [ 1992.186161] ? __io_queue_sqe+0x666/0x9d0 [ 1992.187162] should_failslab+0x5/0x20 [ 1992.188105] kmem_cache_alloc_trace+0x55/0x320 [ 1992.189126] __io_queue_sqe+0x666/0x9d0 [ 1992.189979] ? io_issue_sqe+0x7660/0x7660 [ 1992.190865] ? io_prep_rw+0x7f5/0x1050 [ 1992.191699] io_submit_sqes+0x4461/0x85c0 [ 1992.192617] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 1992.193670] __do_sys_io_uring_enter+0x6b5/0x1730 [ 1992.194705] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1992.195838] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1992.196798] ? trace_hardirqs_on+0x5b/0x180 14:57:29 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x18000000, 0x0, 0x0) [ 1992.197710] ? io_submit_sqes+0x85c0/0x85c0 [ 1992.198751] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1992.199755] ? finish_task_switch+0x126/0x5d0 [ 1992.200767] ? finish_task_switch+0xef/0x5d0 [ 1992.201750] ? __switch_to+0x572/0xf70 [ 1992.202614] ? __switch_to_asm+0x3a/0x60 [ 1992.203516] ? __switch_to_asm+0x34/0x60 [ 1992.204439] ? __schedule+0x82c/0x1ea0 [ 1992.205317] ? io_schedule_timeout+0x140/0x140 [ 1992.206331] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1992.207349] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1992.208577] ? ksys_write+0x1a9/0x260 [ 1992.209436] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1992.210603] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1992.211751] do_syscall_64+0x33/0x40 [ 1992.212592] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1992.213731] RIP: 0033:0x7fae80968b19 [ 1992.214561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1992.218642] RSP: 002b:00007fae7dede188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1992.220349] RAX: ffffffffffffffda RBX: 00007fae80a7bf60 RCX: 00007fae80968b19 [ 1992.221937] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1992.223519] RBP: 00007fae7dede1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1992.225118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1992.226704] R13: 00007fffa57e443f R14: 00007fae7dede300 R15: 0000000000022000 [ 1992.241822] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1992.274233] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.7'. 14:57:29 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1e000000, 0x0, 0x0) 14:57:29 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x200040, 0x0) io_uring_enter(r0, 0x6f58, 0x7c4c, 0x1, 0x0, 0x0) 14:57:44 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x4600, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:57:44 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 14:57:44 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000008, 0x810, r0, 0x8000000) syz_io_uring_setup(0x6f9f, &(0x7f0000000080)={0x0, 0x3a49, 0x10, 0x1, 0x1a0, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x2) close(r3) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$TCXONC(r3, 0x540a, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:57:44 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 14:57:44 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) 14:57:44 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3000, 0x0, 0x0, 0x0) 14:57:44 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 14:57:44 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 74) [ 2006.791816] FAULT_INJECTION: forcing a failure. [ 2006.791816] name failslab, interval 1, probability 0, space 0, times 0 [ 2006.794533] CPU: 0 PID: 10421 Comm: syz-executor.3 Not tainted 5.10.181 #1 [ 2006.796027] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2006.797799] Call Trace: [ 2006.798392] dump_stack+0x107/0x167 [ 2006.799177] should_fail.cold+0x5/0xa [ 2006.800030] ? create_object.isra.0+0x3a/0xa20 [ 2006.801013] should_failslab+0x5/0x20 [ 2006.801842] kmem_cache_alloc+0x5b/0x310 [ 2006.802725] ? mark_held_locks+0x9e/0xe0 [ 2006.803613] create_object.isra.0+0x3a/0xa20 [ 2006.804573] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2006.805692] kmem_cache_alloc_bulk+0x168/0x320 [ 2006.806670] io_submit_sqes+0x6f76/0x85c0 [ 2006.807547] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2006.808613] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 2006.809699] __do_sys_io_uring_enter+0x6b5/0x1730 [ 2006.810742] ? lock_downgrade+0x6d0/0x6d0 [ 2006.811645] ? find_held_lock+0x2c/0x110 [ 2006.812557] ? io_submit_sqes+0x85c0/0x85c0 [ 2006.813522] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2006.814569] ? wait_for_completion_io+0x270/0x270 [ 2006.815619] ? rcu_read_lock_any_held+0x75/0xa0 [ 2006.816649] ? vfs_write+0x354/0xa70 [ 2006.817479] ? fput_many+0x2f/0x1a0 [ 2006.818292] ? ksys_write+0x1a9/0x260 [ 2006.819142] ? __ia32_sys_read+0xb0/0xb0 [ 2006.820059] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2006.821232] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2006.822381] do_syscall_64+0x33/0x40 [ 2006.823223] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2006.824379] RIP: 0033:0x7fba42b8db19 [ 2006.825202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2006.829270] RSP: 002b:00007fba40103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2006.830946] RAX: ffffffffffffffda RBX: 00007fba42ca0f60 RCX: 00007fba42b8db19 [ 2006.832559] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2006.834142] RBP: 00007fba401031d0 R08: 0000000000000000 R09: 0000000000000000 [ 2006.835712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2006.837295] R13: 00007ffd03a0608f R14: 00007fba40103300 R15: 0000000000022000 [ 2006.840425] FAULT_INJECTION: forcing a failure. [ 2006.840425] name failslab, interval 1, probability 0, space 0, times 0 [ 2006.843149] CPU: 0 PID: 10424 Comm: syz-executor.2 Not tainted 5.10.181 #1 [ 2006.844715] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2006.846568] Call Trace: [ 2006.847181] dump_stack+0x107/0x167 [ 2006.848021] should_fail.cold+0x5/0xa [ 2006.848815] ? create_object.isra.0+0x3a/0xa20 [ 2006.849736] should_failslab+0x5/0x20 [ 2006.850505] kmem_cache_alloc+0x5b/0x310 [ 2006.851336] ? mark_held_locks+0x9e/0xe0 [ 2006.852177] create_object.isra.0+0x3a/0xa20 [ 2006.853045] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2006.854077] kmem_cache_alloc_bulk+0x168/0x320 [ 2006.854999] io_submit_sqes+0x6f76/0x85c0 [ 2006.855828] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2006.856844] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 2006.857840] __do_sys_io_uring_enter+0x6b5/0x1730 [ 2006.858815] ? lock_downgrade+0x6d0/0x6d0 [ 2006.859645] ? find_held_lock+0x2c/0x110 [ 2006.860490] ? io_submit_sqes+0x85c0/0x85c0 [ 2006.861371] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2006.862341] ? wait_for_completion_io+0x270/0x270 [ 2006.863306] ? rcu_read_lock_any_held+0x75/0xa0 [ 2006.864246] ? vfs_write+0x354/0xa70 [ 2006.864997] ? fput_many+0x2f/0x1a0 [ 2006.865733] ? ksys_write+0x1a9/0x260 [ 2006.866496] ? __ia32_sys_read+0xb0/0xb0 [ 2006.867318] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2006.868409] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2006.869447] do_syscall_64+0x33/0x40 [ 2006.870196] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2006.871213] RIP: 0033:0x7fd0429e4b19 [ 2006.871965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2006.875628] RSP: 002b:00007fd03ff5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2006.877166] RAX: ffffffffffffffda RBX: 00007fd042af7f60 RCX: 00007fd0429e4b19 [ 2006.878587] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2006.880028] RBP: 00007fd03ff5a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2006.881451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2006.882879] R13: 00007ffda38c770f R14: 00007fd03ff5a300 R15: 0000000000022000 14:57:44 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:57:58 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:57:58 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r2}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(r1, r0, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x2) r3 = syz_io_uring_setup(0x1eff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x2a5, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) close(r6) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:57:58 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 14:57:58 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x24000000, 0x0, 0x0) 14:57:58 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3600, 0x0, 0x0, 0x0) 14:57:58 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={r7, r8+10000000}}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x401, 0x0, &(0x7f0000000080)="99a940ec22e12fc6aebd4d4579966901e27c3ba2bdb0b15eaf74f5f90809c806faf813b5143beb7e5d4bb84590703bbffca5731fb0ff", 0x6, 0x0, 0x1, {0x2, r9}}, 0x9) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11031, r4, 0x10000000) r12 = syz_io_uring_setup(0x25a2, &(0x7f0000000340)={0x0, 0xd08, 0x8, 0x2, 0x188}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f00000003c0)) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r11, &(0x7f0000000400)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r13}}, 0x7fffffff) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xa46e, 0x0, 0x0, 0x0) 14:57:58 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 14:57:58 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0) [ 2020.837025] FAULT_INJECTION: forcing a failure. [ 2020.837025] name failslab, interval 1, probability 0, space 0, times 0 [ 2020.838380] CPU: 1 PID: 10454 Comm: syz-executor.2 Not tainted 5.10.181 #1 [ 2020.839117] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2020.839990] Call Trace: [ 2020.840303] dump_stack+0x107/0x167 [ 2020.840691] should_fail.cold+0x5/0xa [ 2020.841101] ? create_object.isra.0+0x3a/0xa20 [ 2020.841590] should_failslab+0x5/0x20 [ 2020.841998] kmem_cache_alloc+0x5b/0x310 [ 2020.842432] create_object.isra.0+0x3a/0xa20 [ 2020.842898] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2020.843433] kmem_cache_alloc_bulk+0x168/0x320 [ 2020.843921] io_submit_sqes+0x6f76/0x85c0 [ 2020.844374] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2020.844903] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 2020.845431] __do_sys_io_uring_enter+0x6b5/0x1730 [ 2020.845959] ? lock_downgrade+0x6d0/0x6d0 [ 2020.846397] ? find_held_lock+0x2c/0x110 [ 2020.846838] ? io_submit_sqes+0x85c0/0x85c0 [ 2020.847303] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2020.847827] ? wait_for_completion_io+0x270/0x270 [ 2020.848352] ? rcu_read_lock_any_held+0x75/0xa0 [ 2020.848849] ? vfs_write+0x354/0xa70 [ 2020.849249] ? fput_many+0x2f/0x1a0 [ 2020.849643] ? ksys_write+0x1a9/0x260 [ 2020.850046] ? __ia32_sys_read+0xb0/0xb0 [ 2020.850485] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2020.851046] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2020.851597] do_syscall_64+0x33/0x40 [ 2020.851994] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2020.852555] RIP: 0033:0x7fd0429e4b19 [ 2020.852957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2020.854931] RSP: 002b:00007fd03ff5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2020.855745] RAX: ffffffffffffffda RBX: 00007fd042af7f60 RCX: 00007fd0429e4b19 [ 2020.856602] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2020.857380] RBP: 00007fd03ff5a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2020.858138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2020.858897] R13: 00007ffda38c770f R14: 00007fd03ff5a300 R15: 0000000000022000 [ 2020.868201] FAULT_INJECTION: forcing a failure. [ 2020.868201] name failslab, interval 1, probability 0, space 0, times 0 [ 2020.869655] CPU: 1 PID: 10455 Comm: syz-executor.3 Not tainted 5.10.181 #1 [ 2020.870388] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2020.871280] Call Trace: [ 2020.871571] dump_stack+0x107/0x167 [ 2020.871967] should_fail.cold+0x5/0xa [ 2020.872386] ? create_object.isra.0+0x3a/0xa20 [ 2020.872877] should_failslab+0x5/0x20 [ 2020.873286] kmem_cache_alloc+0x5b/0x310 [ 2020.873720] ? mark_held_locks+0x9e/0xe0 [ 2020.874156] create_object.isra.0+0x3a/0xa20 [ 2020.874633] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2020.875179] kmem_cache_alloc_bulk+0x168/0x320 [ 2020.875670] io_submit_sqes+0x6f76/0x85c0 [ 2020.876115] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2020.876659] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 2020.877190] __do_sys_io_uring_enter+0x6b5/0x1730 [ 2020.877707] ? lock_downgrade+0x6d0/0x6d0 [ 2020.878146] ? find_held_lock+0x2c/0x110 [ 2020.878585] ? io_submit_sqes+0x85c0/0x85c0 [ 2020.879046] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2020.879559] ? wait_for_completion_io+0x270/0x270 [ 2020.880075] ? rcu_read_lock_any_held+0x75/0xa0 [ 2020.880594] ? vfs_write+0x354/0xa70 [ 2020.880990] ? fput_many+0x2f/0x1a0 [ 2020.881385] ? ksys_write+0x1a9/0x260 [ 2020.881798] ? __ia32_sys_read+0xb0/0xb0 [ 2020.882238] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2020.882799] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2020.883351] do_syscall_64+0x33/0x40 [ 2020.883747] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2020.884306] RIP: 0033:0x7fba42b8db19 [ 2020.884704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2020.886664] RSP: 002b:00007fba40103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2020.887483] RAX: ffffffffffffffda RBX: 00007fba42ca0f60 RCX: 00007fba42b8db19 [ 2020.888254] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2020.889011] RBP: 00007fba401031d0 R08: 0000000000000000 R09: 0000000000000000 [ 2020.889776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2020.890531] R13: 00007ffd03a0608f R14: 00007fba40103300 R15: 0000000000022000 14:57:58 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2a000000, 0x0, 0x0) 14:57:58 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) 14:57:58 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x30000000, 0x0, 0x0) 14:57:58 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000440)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000080), 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x2040) syz_open_procfs(r4, &(0x7f0000000480)='limits\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(r6, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r7}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(r6, r5, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(r5, 0x4b65, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r5, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:57:58 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) [ 2021.276342] FAULT_INJECTION: forcing a failure. [ 2021.276342] name failslab, interval 1, probability 0, space 0, times 0 [ 2021.277886] CPU: 1 PID: 10484 Comm: syz-executor.2 Not tainted 5.10.181 #1 [ 2021.278624] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2021.279551] Call Trace: [ 2021.279846] dump_stack+0x107/0x167 [ 2021.280261] should_fail.cold+0x5/0xa [ 2021.280677] ? create_object.isra.0+0x3a/0xa20 [ 2021.281168] should_failslab+0x5/0x20 [ 2021.281575] kmem_cache_alloc+0x5b/0x310 [ 2021.282013] ? mark_held_locks+0x9e/0xe0 [ 2021.282447] create_object.isra.0+0x3a/0xa20 [ 2021.282915] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2021.283484] kmem_cache_alloc_bulk+0x168/0x320 [ 2021.284012] io_submit_sqes+0x6f76/0x85c0 [ 2021.284485] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2021.285040] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 2021.285587] __do_sys_io_uring_enter+0x6b5/0x1730 [ 2021.286106] ? lock_downgrade+0x6d0/0x6d0 [ 2021.286549] ? find_held_lock+0x2c/0x110 [ 2021.286987] ? io_submit_sqes+0x85c0/0x85c0 [ 2021.287467] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2021.287979] ? wait_for_completion_io+0x270/0x270 [ 2021.288530] ? rcu_read_lock_any_held+0x75/0xa0 [ 2021.289033] ? vfs_write+0x354/0xa70 [ 2021.289436] ? fput_many+0x2f/0x1a0 [ 2021.289828] ? ksys_write+0x1a9/0x260 [ 2021.290246] ? __ia32_sys_read+0xb0/0xb0 [ 2021.290685] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2021.291253] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2021.291817] do_syscall_64+0x33/0x40 [ 2021.292243] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2021.292800] RIP: 0033:0x7fd0429e4b19 [ 2021.293203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2021.295194] RSP: 002b:00007fd03ff5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2021.296009] RAX: ffffffffffffffda RBX: 00007fd042af7f60 RCX: 00007fd0429e4b19 [ 2021.296781] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2021.297549] RBP: 00007fd03ff5a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2021.298302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2021.299069] R13: 00007ffda38c770f R14: 00007fd03ff5a300 R15: 0000000000022000 14:58:10 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 14:58:10 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(r6, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r7}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(r6, r5, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(r5, 0x4b65, 0x2) io_uring_enter(r5, 0x327e, 0x48c8, 0x0, &(0x7f0000000080), 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000180)) 14:58:10 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) [ 2032.578838] FAULT_INJECTION: forcing a failure. [ 2032.578838] name failslab, interval 1, probability 0, space 0, times 0 [ 2032.580363] CPU: 0 PID: 10503 Comm: syz-executor.2 Not tainted 5.10.181 #1 [ 2032.581153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2032.582109] Call Trace: [ 2032.582417] dump_stack+0x107/0x167 [ 2032.582846] should_fail.cold+0x5/0xa [ 2032.583285] ? create_object.isra.0+0x3a/0xa20 [ 2032.583812] should_failslab+0x5/0x20 [ 2032.584249] kmem_cache_alloc+0x5b/0x310 [ 2032.584733] ? mark_held_locks+0x9e/0xe0 [ 2032.585176] create_object.isra.0+0x3a/0xa20 [ 2032.585679] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2032.586237] kmem_cache_alloc_bulk+0x168/0x320 [ 2032.586771] io_submit_sqes+0x6f76/0x85c0 [ 2032.587251] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2032.587790] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 2032.588368] __do_sys_io_uring_enter+0x6b5/0x1730 [ 2032.588918] ? lock_downgrade+0x6d0/0x6d0 [ 2032.589402] ? find_held_lock+0x2c/0x110 [ 2032.589848] ? io_submit_sqes+0x85c0/0x85c0 [ 2032.590354] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2032.590877] ? wait_for_completion_io+0x270/0x270 [ 2032.591433] ? rcu_read_lock_any_held+0x75/0xa0 [ 2032.591943] ? vfs_write+0x354/0xa70 [ 2032.592383] ? fput_many+0x2f/0x1a0 [ 2032.592790] ? ksys_write+0x1a9/0x260 [ 2032.593235] ? __ia32_sys_read+0xb0/0xb0 [ 2032.593694] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2032.594311] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2032.594880] do_syscall_64+0x33/0x40 [ 2032.595312] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2032.595780] FAULT_INJECTION: forcing a failure. [ 2032.595780] name failslab, interval 1, probability 0, space 0, times 0 [ 2032.595865] RIP: 0033:0x7fd0429e4b19 [ 2032.595887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2032.600591] RSP: 002b:00007fd03ff5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2032.601466] RAX: ffffffffffffffda RBX: 00007fd042af7f60 RCX: 00007fd0429e4b19 [ 2032.602282] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2032.603099] RBP: 00007fd03ff5a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2032.603923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2032.604759] R13: 00007ffda38c770f R14: 00007fd03ff5a300 R15: 0000000000022000 [ 2032.605607] CPU: 1 PID: 10512 Comm: syz-executor.3 Not tainted 5.10.181 #1 [ 2032.606952] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2032.608533] Call Trace: [ 2032.609052] dump_stack+0x107/0x167 [ 2032.609751] should_fail.cold+0x5/0xa [ 2032.610489] ? create_object.isra.0+0x3a/0xa20 [ 2032.611363] should_failslab+0x5/0x20 [ 2032.612101] kmem_cache_alloc+0x5b/0x310 [ 2032.612906] ? mark_held_locks+0x9e/0xe0 [ 2032.613699] create_object.isra.0+0x3a/0xa20 [ 2032.614561] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2032.615553] kmem_cache_alloc_bulk+0x168/0x320 [ 2032.616458] io_submit_sqes+0x6f76/0x85c0 [ 2032.617264] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2032.618228] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 2032.619205] __do_sys_io_uring_enter+0x6b5/0x1730 [ 2032.620172] ? lock_downgrade+0x6d0/0x6d0 [ 2032.620998] ? find_held_lock+0x2c/0x110 [ 2032.621799] ? io_submit_sqes+0x85c0/0x85c0 [ 2032.622652] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2032.623585] ? wait_for_completion_io+0x270/0x270 [ 2032.624535] ? rcu_read_lock_any_held+0x75/0xa0 [ 2032.625449] ? vfs_write+0x354/0xa70 [ 2032.626189] ? fput_many+0x2f/0x1a0 [ 2032.626903] ? ksys_write+0x1a9/0x260 [ 2032.627654] ? __ia32_sys_read+0xb0/0xb0 [ 2032.628465] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2032.629493] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2032.630520] do_syscall_64+0x33/0x40 [ 2032.631258] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2032.632266] RIP: 0033:0x7fba42b8db19 14:58:10 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 14:58:10 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x36000000, 0x0, 0x0) 14:58:10 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) syz_io_uring_setup(0x5f2c, &(0x7f0000000080)={0x0, 0x69df, 0x1, 0x1, 0x3e8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:58:10 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c00, 0x0, 0x0, 0x0) 14:58:10 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) [ 2032.633008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2032.636969] RSP: 002b:00007fba40103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2032.638468] RAX: ffffffffffffffda RBX: 00007fba42ca0f60 RCX: 00007fba42b8db19 [ 2032.639871] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2032.641282] RBP: 00007fba401031d0 R08: 0000000000000000 R09: 0000000000000000 [ 2032.642682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2032.644078] R13: 00007ffd03a0608f R14: 00007fba40103300 R15: 0000000000022000 14:58:10 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0) 14:58:10 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3c000000, 0x0, 0x0) 14:58:10 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) 14:58:10 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0) 14:58:10 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0) 14:58:10 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0) 14:58:10 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0) 14:58:10 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) [ 2033.079244] FAULT_INJECTION: forcing a failure. [ 2033.079244] name failslab, interval 1, probability 0, space 0, times 0 [ 2033.080754] CPU: 0 PID: 10548 Comm: syz-executor.2 Not tainted 5.10.181 #1 [ 2033.081496] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2033.082582] Call Trace: [ 2033.082934] dump_stack+0x107/0x167 [ 2033.083416] should_fail.cold+0x5/0xa [ 2033.083912] ? create_object.isra.0+0x3a/0xa20 [ 2033.084523] should_failslab+0x5/0x20 [ 2033.085026] kmem_cache_alloc+0x5b/0x310 [ 2033.085552] ? mark_held_locks+0x9e/0xe0 [ 2033.086078] create_object.isra.0+0x3a/0xa20 [ 2033.086641] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2033.087300] kmem_cache_alloc_bulk+0x168/0x320 [ 2033.087800] io_submit_sqes+0x6f76/0x85c0 [ 2033.088350] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2033.088992] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 2033.089635] __do_sys_io_uring_enter+0x6b5/0x1730 [ 2033.090257] ? lock_downgrade+0x6d0/0x6d0 [ 2033.090795] ? find_held_lock+0x2c/0x110 [ 2033.091322] ? io_submit_sqes+0x85c0/0x85c0 [ 2033.091889] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2033.092527] ? wait_for_completion_io+0x270/0x270 [ 2033.093152] ? rcu_read_lock_any_held+0x75/0xa0 [ 2033.093754] ? vfs_write+0x354/0xa70 [ 2033.094159] ? fput_many+0x2f/0x1a0 [ 2033.094630] ? ksys_write+0x1a9/0x260 [ 2033.095119] ? __ia32_sys_read+0xb0/0xb0 [ 2033.095639] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2033.096311] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2033.096992] do_syscall_64+0x33/0x40 [ 2033.097473] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2033.098133] RIP: 0033:0x7fd0429e4b19 [ 2033.098562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2033.100568] RSP: 002b:00007fd03ff5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2033.101354] RAX: ffffffffffffffda RBX: 00007fd042af7f60 RCX: 00007fd0429e4b19 [ 2033.102086] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2033.102860] RBP: 00007fd03ff5a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2033.103624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2033.104393] R13: 00007ffda38c770f R14: 00007fd03ff5a300 R15: 0000000000022000 14:58:10 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:58:10 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 14:58:10 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x7b, 0x20, 0x5345d308, 0x12, @private0, @remote, 0x4, 0x10, 0x7, 0x7fffffff}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x4, 0x7f, 0x0, 0x0, 0x11, @mcast1, @mcast1, 0x40, 0x7, 0x3db, 0x101}}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r6, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @dev}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="80010052", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf25170000004c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000080003000200000014000200626174616476300000000000000000001400020065727370616e300000000000000000003000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="14006e645373440001000000000000160800010000000000c9d631fa5a99d38bf9a4dc6303577e7f62672dc17a793cffe4802ab7ee6505fdba0688776231698e71fb3541fcb3a3d8698d64a14f31a90783a960f79c8396e6b632327b1ae4c66284964ada49ca221f0000005e50037af5d1e4ea6fe9a304301296a4", @ANYRES32=r2, @ANYBLOB="5c007a105dd30180", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="080003000100000014000200766c616e3000000000000000000000000800030001000000140002006e72300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="4400018014fa83611a5959ef08000100", @ANYRESHEX=r2, @ANYBLOB="14000200776c616e3100000000000000000000001400020076657468305f746f5f6873720000000008000300020000000c0001800800030001000000180001801400020065727370616e300000000000000000002c00018014000200626f6e645f736c6176655f300000000014000200766c616e3000"/128], 0x180}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) r7 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6000, @fd=r10, 0x0, 0x0, 0x0, 0x1, 0x0, {0x2}}, 0x0) close(r10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r7, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:58:10 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) [ 2033.367146] device lo entered promiscuous mode [ 2033.372317] FAULT_INJECTION: forcing a failure. [ 2033.372317] name failslab, interval 1, probability 0, space 0, times 0 [ 2033.373674] CPU: 0 PID: 10562 Comm: syz-executor.3 Not tainted 5.10.181 #1 [ 2033.374417] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2033.375320] Call Trace: [ 2033.375600] dump_stack+0x107/0x167 [ 2033.375995] should_fail.cold+0x5/0xa [ 2033.376418] ? create_object.isra.0+0x3a/0xa20 [ 2033.376910] should_failslab+0x5/0x20 [ 2033.377329] kmem_cache_alloc+0x5b/0x310 [ 2033.377738] ? mark_held_locks+0x9e/0xe0 [ 2033.378184] create_object.isra.0+0x3a/0xa20 [ 2033.378655] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2033.379209] kmem_cache_alloc_bulk+0x168/0x320 [ 2033.379675] io_submit_sqes+0x6f76/0x85c0 [ 2033.380122] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2033.380641] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 2033.381179] __do_sys_io_uring_enter+0x6b5/0x1730 [ 2033.381700] ? lock_downgrade+0x6d0/0x6d0 [ 2033.382147] ? find_held_lock+0x2c/0x110 [ 2033.382605] ? io_submit_sqes+0x85c0/0x85c0 [ 2033.383102] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2033.383649] ? wait_for_completion_io+0x270/0x270 [ 2033.384202] ? rcu_read_lock_any_held+0x75/0xa0 [ 2033.384676] ? vfs_write+0x354/0xa70 [ 2033.385110] ? fput_many+0x2f/0x1a0 [ 2033.385477] ? ksys_write+0x1a9/0x260 [ 2033.385910] ? __ia32_sys_read+0xb0/0xb0 [ 2033.386323] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2033.386922] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2033.387446] do_syscall_64+0x33/0x40 [ 2033.387871] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2033.388398] RIP: 0033:0x7fba42b8db19 [ 2033.388834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2033.390922] RSP: 002b:00007fba40103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2033.391791] RAX: ffffffffffffffda RBX: 00007fba42ca0f60 RCX: 00007fba42b8db19 [ 2033.392608] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2033.393415] RBP: 00007fba401031d0 R08: 0000000000000000 R09: 0000000000000000 [ 2033.394220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2033.395025] R13: 00007ffd03a0608f R14: 00007fba40103300 R15: 0000000000022000 [ 2033.413554] device lo left promiscuous mode 14:58:10 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) 14:58:22 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0) 14:58:22 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x6000000, 0x0, 0x0, 0x0) 14:58:22 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) 14:58:22 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x600000000000000, 0x0, 0x0) 14:58:22 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 14:58:22 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:58:22 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 14:58:22 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fdatasync(r3) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:58:22 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0) [ 2045.366596] FAULT_INJECTION: forcing a failure. [ 2045.366596] name failslab, interval 1, probability 0, space 0, times 0 [ 2045.369307] CPU: 0 PID: 10592 Comm: syz-executor.2 Not tainted 5.10.181 #1 [ 2045.370795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2045.372585] Call Trace: [ 2045.373162] dump_stack+0x107/0x167 [ 2045.373952] should_fail.cold+0x5/0xa [ 2045.374775] ? create_object.isra.0+0x3a/0xa20 [ 2045.375769] should_failslab+0x5/0x20 [ 2045.376613] kmem_cache_alloc+0x5b/0x310 [ 2045.377487] ? mark_held_locks+0x9e/0xe0 [ 2045.378361] create_object.isra.0+0x3a/0xa20 [ 2045.379305] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2045.380402] kmem_cache_alloc_bulk+0x168/0x320 [ 2045.381394] io_submit_sqes+0x6f76/0x85c0 [ 2045.382287] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2045.383344] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 2045.384412] __do_sys_io_uring_enter+0x6b5/0x1730 [ 2045.385723] ? lock_downgrade+0x6d0/0x6d0 [ 2045.386711] ? find_held_lock+0x2c/0x110 [ 2045.387682] ? io_submit_sqes+0x85c0/0x85c0 [ 2045.388750] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2045.389894] ? wait_for_completion_io+0x270/0x270 [ 2045.391039] ? rcu_read_lock_any_held+0x75/0xa0 [ 2045.392134] ? vfs_write+0x354/0xa70 [ 2045.393026] ? fput_many+0x2f/0x1a0 [ 2045.393891] ? ksys_write+0x1a9/0x260 [ 2045.394797] ? __ia32_sys_read+0xb0/0xb0 [ 2045.395767] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2045.397032] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2045.398255] do_syscall_64+0x33/0x40 [ 2045.399138] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2045.400353] RIP: 0033:0x7fd0429e4b19 [ 2045.401212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2045.404890] RSP: 002b:00007fd03ff5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2045.406431] RAX: ffffffffffffffda RBX: 00007fd042af7f60 RCX: 00007fd0429e4b19 [ 2045.407861] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2045.409294] RBP: 00007fd03ff5a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2045.410718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2045.412148] R13: 00007ffda38c770f R14: 00007fd03ff5a300 R15: 0000000000022000 [ 2045.450233] FAULT_INJECTION: forcing a failure. [ 2045.450233] name failslab, interval 1, probability 0, space 0, times 0 [ 2045.452175] CPU: 1 PID: 10598 Comm: syz-executor.3 Not tainted 5.10.181 #1 [ 2045.453175] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2045.454074] Call Trace: [ 2045.454381] dump_stack+0x107/0x167 [ 2045.454776] should_fail.cold+0x5/0xa [ 2045.455203] ? create_object.isra.0+0x3a/0xa20 [ 2045.455695] should_failslab+0x5/0x20 [ 2045.456114] kmem_cache_alloc+0x5b/0x310 [ 2045.456562] ? mark_held_locks+0x9e/0xe0 [ 2045.457010] create_object.isra.0+0x3a/0xa20 [ 2045.457497] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2045.458067] kmem_cache_alloc_bulk+0x168/0x320 [ 2045.458562] io_submit_sqes+0x6f76/0x85c0 [ 2045.459024] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2045.459551] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 2045.460106] __do_sys_io_uring_enter+0x6b5/0x1730 [ 2045.460652] ? lock_downgrade+0x6d0/0x6d0 [ 2045.461110] ? find_held_lock+0x2c/0x110 [ 2045.461550] ? io_submit_sqes+0x85c0/0x85c0 [ 2045.462031] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2045.462554] ? wait_for_completion_io+0x270/0x270 [ 2045.463084] ? rcu_read_lock_any_held+0x75/0xa0 [ 2045.463584] ? vfs_write+0x354/0xa70 [ 2045.463999] ? fput_many+0x2f/0x1a0 [ 2045.464392] ? ksys_write+0x1a9/0x260 [ 2045.464813] ? __ia32_sys_read+0xb0/0xb0 [ 2045.465257] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2045.465827] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2045.466389] do_syscall_64+0x33/0x40 [ 2045.466798] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2045.467352] RIP: 0033:0x7fba42b8db19 [ 2045.467748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2045.469701] RSP: 002b:00007fba40103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2045.470513] RAX: ffffffffffffffda RBX: 00007fba42ca0f60 RCX: 00007fba42b8db19 [ 2045.471272] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2045.472038] RBP: 00007fba401031d0 R08: 0000000000000000 R09: 0000000000000000 [ 2045.472812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2045.473589] R13: 00007ffd03a0608f R14: 00007fba40103300 R15: 0000000000022000 14:58:22 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) 14:58:35 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 14:58:35 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0) 14:58:35 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x2c}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000004080)=[{{&(0x7f0000000240)=@x25={0x9, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, &(0x7f0000001340)=""/191, 0xbf}, 0x7fff}, {{&(0x7f0000001400)=@nfc, 0x80, &(0x7f0000001540)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000001480)=""/147, 0x93}], 0x2, &(0x7f0000001580)=""/115, 0x73}, 0x1}, {{&(0x7f0000001600)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001680)}, {&(0x7f00000016c0)=""/7, 0x7}, {&(0x7f0000001700)=""/180, 0xb4}, {&(0x7f00000017c0)=""/66, 0x42}], 0x4, &(0x7f0000001880)=""/253, 0xfd}, 0x1f}, {{&(0x7f0000001980)=@alg, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001a00)=""/251, 0xfb}], 0x1, &(0x7f0000001b40)=""/4, 0x4}, 0x7}, {{&(0x7f0000001b80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000004000)=[{&(0x7f0000001c00)=""/132, 0x84}, {&(0x7f0000001cc0)=""/47, 0x2f}, {&(0x7f0000001d00)=""/25, 0x19}, {&(0x7f0000002e00)=""/147, 0x93}, {&(0x7f0000001d40)=""/63, 0x3f}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/252, 0xfc}, {&(0x7f0000003fc0)=""/32, 0x20}], 0x8}, 0xfffffffe}], 0x5, 0x40002040, &(0x7f00000041c0)={0x0, 0x989680}) setsockopt$sock_int(r3, 0x1, 0x1e, &(0x7f0000000080)=0x8, 0x4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x11, 0xffffffffffffffff, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r3, &(0x7f00000000c0), 0x0, 0x0, 0x80800, 0x0, {0x0, r6}}, 0x0) 14:58:35 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 14:58:35 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xc00000000000000, 0x0, 0x0) 14:58:35 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(r6, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r7}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(r6, r5, &(0x7f0000000140)=0x7, 0x0) r8 = fsopen(&(0x7f0000000080)='hfsplus\x00', 0x1) signalfd(r8, &(0x7f0000000180)={[0x5]}, 0x8) ioctl$KDSKBLED(r5, 0x4b65, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x40010, r5, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:58:35 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc000000, 0x0, 0x0, 0x0) 14:58:35 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) [ 2058.427235] FAULT_INJECTION: forcing a failure. [ 2058.427235] name failslab, interval 1, probability 0, space 0, times 0 [ 2058.429843] CPU: 1 PID: 10628 Comm: syz-executor.2 Not tainted 5.10.181 #1 [ 2058.431272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2058.432974] Call Trace: [ 2058.433515] dump_stack+0x107/0x167 [ 2058.434258] should_fail.cold+0x5/0xa [ 2058.435028] ? create_object.isra.0+0x3a/0xa20 [ 2058.435958] should_failslab+0x5/0x20 [ 2058.436759] kmem_cache_alloc+0x5b/0x310 [ 2058.437297] FAULT_INJECTION: forcing a failure. [ 2058.437297] name failslab, interval 1, probability 0, space 0, times 0 [ 2058.437601] ? mark_held_locks+0x9e/0xe0 [ 2058.437622] create_object.isra.0+0x3a/0xa20 [ 2058.441566] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2058.442602] kmem_cache_alloc_bulk+0x168/0x320 [ 2058.443533] io_submit_sqes+0x6f76/0x85c0 [ 2058.444377] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2058.445391] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 2058.446400] __do_sys_io_uring_enter+0x6b5/0x1730 [ 2058.447396] ? lock_downgrade+0x6d0/0x6d0 [ 2058.448233] ? find_held_lock+0x2c/0x110 [ 2058.449074] ? io_submit_sqes+0x85c0/0x85c0 [ 2058.449954] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2058.450946] ? wait_for_completion_io+0x270/0x270 [ 2058.451923] ? rcu_read_lock_any_held+0x75/0xa0 [ 2058.452886] ? vfs_write+0x354/0xa70 [ 2058.453647] ? fput_many+0x2f/0x1a0 [ 2058.454392] ? ksys_write+0x1a9/0x260 [ 2058.455165] ? __ia32_sys_read+0xb0/0xb0 [ 2058.456001] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2058.457076] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2058.458122] do_syscall_64+0x33/0x40 [ 2058.458885] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2058.459920] RIP: 0033:0x7fd0429e4b19 [ 2058.460687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2058.464390] RSP: 002b:00007fd03ff5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2058.465973] RAX: ffffffffffffffda RBX: 00007fd042af7f60 RCX: 00007fd0429e4b19 [ 2058.467390] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2058.468836] RBP: 00007fd03ff5a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2058.470273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2058.471712] R13: 00007ffda38c770f R14: 00007fd03ff5a300 R15: 0000000000022000 [ 2058.473196] CPU: 0 PID: 10629 Comm: syz-executor.3 Not tainted 5.10.181 #1 [ 2058.474598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2058.476266] Call Trace: [ 2058.476815] dump_stack+0x107/0x167 [ 2058.477553] should_fail.cold+0x5/0xa [ 2058.478322] ? io_setup_async_rw+0x180/0x580 [ 2058.479206] should_failslab+0x5/0x20 [ 2058.479972] __kmalloc+0x72/0x390 [ 2058.480686] io_setup_async_rw+0x180/0x580 [ 2058.481557] io_read+0xe98/0x11e0 [ 2058.482267] ? kiocb_done+0xc90/0xc90 [ 2058.483071] ? stack_trace_consume_entry+0x160/0x160 [ 2058.484106] ? lock_acquire+0x197/0x470 [ 2058.484948] ? __lock_acquire+0xbb1/0x5b00 [ 2058.485812] io_issue_sqe+0x2e12/0x7660 [ 2058.486643] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2058.487700] ? lock_chain_count+0x20/0x20 [ 2058.488551] ? __is_insn_slot_addr+0x14c/0x290 [ 2058.489482] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2058.490543] ? io_connect+0x610/0x610 [ 2058.491316] ? lock_acquire+0x197/0x470 [ 2058.492127] ? find_held_lock+0x2c/0x110 [ 2058.492988] ? __fget_files+0x26d/0x4c0 [ 2058.493802] ? lock_downgrade+0x6d0/0x6d0 [ 2058.494655] __io_queue_sqe+0x90/0x9d0 [ 2058.495450] ? io_issue_sqe+0x7660/0x7660 [ 2058.496287] ? io_prep_rw+0x7f5/0x1050 [ 2058.497087] io_submit_sqes+0x4461/0x85c0 [ 2058.497952] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 2058.498960] __do_sys_io_uring_enter+0x6b5/0x1730 [ 2058.499933] ? lock_downgrade+0x6d0/0x6d0 [ 2058.500781] ? find_held_lock+0x2c/0x110 [ 2058.501607] ? io_submit_sqes+0x85c0/0x85c0 [ 2058.502493] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2058.503470] ? wait_for_completion_io+0x270/0x270 [ 2058.504450] ? rcu_read_lock_any_held+0x75/0xa0 [ 2058.505401] ? vfs_write+0x354/0xa70 [ 2058.506161] ? fput_many+0x2f/0x1a0 [ 2058.506894] ? ksys_write+0x1a9/0x260 [ 2058.507669] ? __ia32_sys_read+0xb0/0xb0 [ 2058.508492] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2058.509569] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2058.510614] do_syscall_64+0x33/0x40 [ 2058.511372] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2058.512403] RIP: 0033:0x7fba42b8db19 [ 2058.513177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2058.516901] RSP: 002b:00007fba40103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2058.518442] RAX: ffffffffffffffda RBX: 00007fba42ca0f60 RCX: 00007fba42b8db19 [ 2058.519889] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2058.521349] RBP: 00007fba401031d0 R08: 0000000000000000 R09: 0000000000000000 [ 2058.522797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2058.524243] R13: 00007ffd03a0608f R14: 00007fba40103300 R15: 0000000000022000 14:58:36 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) syz_io_uring_setup(0x382c, &(0x7f0000000240)={0x0, 0x93ab, 0x2, 0x2, 0x2d1, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000340)=0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000380)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0x9, 0x8, 0x0, {0x0, 0x0, r5}}, 0x1f) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58e7, 0x71b4, 0x2, &(0x7f0000000080)={[0x7]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(r3, 0x80503d01, &(0x7f0000000180)) 14:58:36 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:58:36 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) 14:58:36 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1200000000000000, 0x0, 0x0) 14:58:36 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000) 14:58:36 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x12000000, 0x0, 0x0, 0x0) 14:58:36 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 14:58:36 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={r6, r7+10000000}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}, 0x10000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:58:36 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={r5, r6+10000000}}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={r9, r10+10000000}}, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x6004, @fd_index=0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, {0x2, r11}}, 0x2) syz_io_uring_submit(0x0, r8, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r11}}, 0x3) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2059.388753] FAULT_INJECTION: forcing a failure. [ 2059.388753] name failslab, interval 1, probability 0, space 0, times 0 [ 2059.391263] CPU: 1 PID: 10675 Comm: syz-executor.2 Not tainted 5.10.181 #1 [ 2059.392609] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2059.394217] Call Trace: [ 2059.394733] dump_stack+0x107/0x167 [ 2059.395443] should_fail.cold+0x5/0xa [ 2059.396183] ? io_setup_async_rw+0x180/0x580 [ 2059.397041] should_failslab+0x5/0x20 [ 2059.397780] __kmalloc+0x72/0x390 [ 2059.398442] io_setup_async_rw+0x180/0x580 [ 2059.399236] io_read+0xe98/0x11e0 [ 2059.399904] ? kiocb_done+0xc90/0xc90 [ 2059.400642] ? stack_trace_consume_entry+0x160/0x160 [ 2059.401631] ? lock_acquire+0x197/0x470 [ 2059.402382] ? __lock_acquire+0xbb1/0x5b00 [ 2059.403186] io_issue_sqe+0x2e12/0x7660 [ 2059.403938] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2059.404948] ? lock_chain_count+0x20/0x20 [ 2059.405725] ? __is_insn_slot_addr+0x14c/0x290 [ 2059.406593] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2059.407571] ? io_connect+0x610/0x610 [ 2059.408297] ? lock_acquire+0x197/0x470 [ 2059.409052] ? find_held_lock+0x2c/0x110 [ 2059.409831] ? __fget_files+0x26d/0x4c0 [ 2059.410576] ? lock_downgrade+0x6d0/0x6d0 [ 2059.411366] __io_queue_sqe+0x90/0x9d0 [ 2059.412102] ? io_issue_sqe+0x7660/0x7660 [ 2059.412899] ? io_prep_rw+0x7f5/0x1050 [ 2059.413634] io_submit_sqes+0x4461/0x85c0 [ 2059.414449] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 2059.415383] __do_sys_io_uring_enter+0x6b5/0x1730 [ 2059.416303] ? lock_downgrade+0x6d0/0x6d0 [ 2059.417084] ? find_held_lock+0x2c/0x110 [ 2059.417852] ? io_submit_sqes+0x85c0/0x85c0 [ 2059.418667] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2059.419561] ? wait_for_completion_io+0x270/0x270 [ 2059.420458] ? rcu_read_lock_any_held+0x75/0xa0 [ 2059.421336] ? vfs_write+0x354/0xa70 [ 2059.422032] ? fput_many+0x2f/0x1a0 [ 2059.422705] ? ksys_write+0x1a9/0x260 [ 2059.423414] ? __ia32_sys_read+0xb0/0xb0 [ 2059.424190] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2059.425174] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2059.426137] do_syscall_64+0x33/0x40 [ 2059.426833] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2059.427796] RIP: 0033:0x7fd0429e4b19 [ 2059.428488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2059.431963] RSP: 002b:00007fd03ff5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2059.433385] RAX: ffffffffffffffda RBX: 00007fd042af7f60 RCX: 00007fd0429e4b19 [ 2059.434706] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2059.436036] RBP: 00007fd03ff5a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2059.437362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2059.438677] R13: 00007ffda38c770f R14: 00007fd03ff5a300 R15: 0000000000022000 14:58:36 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:58:52 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:58:52 executing program 1: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)=ANY=[]) r0 = syz_io_uring_setup(0x4d53, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x0, 0x1ed}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x20000000, 0x4}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, &(0x7f0000000180)={{0x8, 0x25}, {0x5, 0x8}, 0x1}) 14:58:52 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:58:52 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) 14:58:52 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x18000000, 0x0, 0x0, 0x0) 14:58:52 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1800000000000000, 0x0, 0x0) 14:58:52 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 14:58:52 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0) [ 2075.183834] FAULT_INJECTION: forcing a failure. [ 2075.183834] name failslab, interval 1, probability 0, space 0, times 0 [ 2075.186439] CPU: 0 PID: 10700 Comm: syz-executor.2 Not tainted 5.10.181 #1 [ 2075.187850] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2075.189556] Call Trace: [ 2075.190107] dump_stack+0x107/0x167 [ 2075.190868] should_fail.cold+0x5/0xa [ 2075.191647] ? create_object.isra.0+0x3a/0xa20 [ 2075.192588] should_failslab+0x5/0x20 [ 2075.193382] kmem_cache_alloc+0x5b/0x310 [ 2075.194223] create_object.isra.0+0x3a/0xa20 [ 2075.195112] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2075.196160] __kmalloc+0x16e/0x390 [ 2075.196914] io_setup_async_rw+0x180/0x580 [ 2075.197776] io_read+0xe98/0x11e0 [ 2075.198498] ? kiocb_done+0xc90/0xc90 [ 2075.199282] ? stack_trace_consume_entry+0x160/0x160 [ 2075.200341] ? lock_acquire+0x197/0x470 [ 2075.201165] ? __lock_acquire+0xbb1/0x5b00 [ 2075.202036] io_issue_sqe+0x2e12/0x7660 [ 2075.202839] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2075.203910] ? lock_chain_count+0x20/0x20 [ 2075.204733] ? __is_insn_slot_addr+0x14c/0x290 [ 2075.205666] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2075.206711] ? io_connect+0x610/0x610 [ 2075.207491] ? lock_acquire+0x197/0x470 [ 2075.208295] ? find_held_lock+0x2c/0x110 [ 2075.209127] ? __fget_files+0x26d/0x4c0 [ 2075.209920] ? lock_downgrade+0x6d0/0x6d0 [ 2075.210768] __io_queue_sqe+0x90/0x9d0 [ 2075.211564] ? io_issue_sqe+0x7660/0x7660 [ 2075.212391] ? io_prep_rw+0x7f5/0x1050 [ 2075.213205] io_submit_sqes+0x4461/0x85c0 [ 2075.214064] ? __do_sys_io_uring_enter+0x6b5/0x1730 [ 2075.215074] __do_sys_io_uring_enter+0x6b5/0x1730 [ 2075.216037] ? lock_downgrade+0x6d0/0x6d0 [ 2075.216854] ? find_held_lock+0x2c/0x110 [ 2075.217675] ? io_submit_sqes+0x85c0/0x85c0 [ 2075.218548] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2075.219512] ? wait_for_completion_io+0x270/0x270 [ 2075.220473] ? rcu_read_lock_any_held+0x75/0xa0 [ 2075.221403] ? vfs_write+0x354/0xa70 [ 2075.222158] ? fput_many+0x2f/0x1a0 [ 2075.222883] ? ksys_write+0x1a9/0x260 [ 2075.223639] ? __ia32_sys_read+0xb0/0xb0 [ 2075.224449] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2075.225511] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2075.226542] do_syscall_64+0x33/0x40 [ 2075.227287] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2075.228303] RIP: 0033:0x7fd0429e4b19 [ 2075.229050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2075.232693] RSP: 002b:00007fd03ff5a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2075.234234] RAX: ffffffffffffffda RBX: 00007fd042af7f60 RCX: 00007fd0429e4b19 [ 2075.235658] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2075.237092] RBP: 00007fd03ff5a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2075.238519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2075.239941] R13: 00007ffda38c770f R14: 00007fd03ff5a300 R15: 0000000000022000 14:58:52 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r6}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(r5, r4, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(r4, 0x4b65, 0x2) dup2(r0, r4) openat(r4, &(0x7f0000000080)='./file0\x00', 0x0, 0x48) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f00000000c0)=0x9, 0x2) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:58:53 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000) 14:58:53 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 14:58:53 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={r6, r7+10000000}}, 0x0) syz_io_uring_setup(0x31ba, &(0x7f0000000080)={0x0, 0x1ddb, 0x4, 0x3, 0x3c, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r9 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a890959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce598eb7ab3f799f657e720a3bad36863ad9f817a73900080000007b4d39fd6eb5cb19853e8300"/188, @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(r10, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r11}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(r10, r9, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(r9, 0x4b65, 0x2) syz_io_uring_submit(r4, r8, &(0x7f0000000340)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r9, &(0x7f0000000240)={0x100, 0x84}, &(0x7f0000000280)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:58:53 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e000000, 0x0, 0x0, 0x0) 14:58:53 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1e00000000000000, 0x0, 0x0) 14:58:53 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x6, 0x0, 0x0, 0x0) 14:58:53 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x81, 0x2, 0x1, 0x1e, 0x0, 0x9, 0x2, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xaa9, 0x0, @perf_config_ext={0x80000000000, 0x6}, 0x8180, 0x5, 0x40, 0x0, 0x4, 0xff45, 0x4, 0x0, 0x1, 0x0, 0x2a}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:58:53 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:58:53 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000) 14:58:53 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x68ef, &(0x7f0000000080)={0x0, 0x88db, 0x2, 0x3, 0xdc, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x6004, @fd_index=0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, {0x2, r6}}, 0x2) syz_io_uring_submit(r1, r5, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0xfffffb8e) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:58:53 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) 14:58:53 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) 14:58:54 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 14:59:08 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x12, 0x0, 0x0, 0x0) 14:59:08 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000) 14:59:08 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:59:08 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) 14:59:08 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) 14:59:08 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000) 14:59:08 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:59:08 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0xa, &(0x7f00000000c0)={r6, r7+60000000}, 0x1, 0x0, 0x1, {0x0, r8}}, 0x4a3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000580)={0x0, 0x0, "66811f68e0c440bba4bcf609493241b2512dbb6769ef1fdb2121944155c56ea8b443729c72bc47cf6386f73b7ce88432ac6f99b63a93b89e7443b46a773671dded77dc24ba79debef1df5ffcd9e2222930e25f8b7e1873aae1853d7d55b7b3b64a43657809e8ea816519bc0c7323593b9e24a473e537db27b2a3ba9b30d958d7ff8d4867d47df99ca9958a196ce0c3c2c20e2a72af42aafe94c107a043d58527121953dfabf2d3ba6f3e7b2f09c47a4a55c3f5a3e68724037035d781567270a828be9bbe626a85ac9fe77bfa461f8903fcd4986a3dcc6fa6ec88fc174630b23dd02e9d99aa7daf6f8a7d6c4a01ad17f50051be284800", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000002c0)={0x0, 0x0, "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", "21b249fc959deb8676dfc6efc31bff8fd6e61ec2911799277237ba81b9cc06cbd398ce995adaeb00c7b1bd81c17adb23fb677f80230973912a73aea9aeb5ca640ceb43d81b37f1bb29d73c2c1f5e01c03a0b333db3a3907ac94ce6fa10819a210101009fea7f41650a5992aea0e8f1fc1d5e6e8d0587e522a9840c1e331c3dc2a31f5d7711580b12b1f5f98a0c04cb93ac1e41c2144db18532a89262c26a43eda2468330c63cacaf1abde481afc3b144fd7ccc0eba32a27b756de09481a98f5a372d0c0c2ff8e28d2d71f23b9645d8df75e52b2a2b328af7611fd964f39fae3e2e0cf95bb8bc778cd8ccd0ed47835db5219c3f1fe4a64f32b4e10e7518ea638f79567b8980576cc3475e701fec916f8fcac3ec25c58017f9f6aa7d29686a0d06e3c4ecdd19f71b3c9db8048b87b9526f0e13a1d84e5b32c407a6c0e40605d007b7d8384d6effe14cdc3a1fc06637cdb2079a598feecd31913bb397b1908c3e0f8df5c83a916a73e9477a200fcf1ef70847f57dedce702eef33f8de11dc3e535689354b4e8a930a25b9d5c06264b297eff3a7549fe34bab3353f861c0dd0ce35c17107506e65fd46a814ceefb06260b5b83f1f8a02053b3ba0d09b1842b31fde5ac9689509e2442e9f7429f8c3ab4da44cf908aa199298b51dec80cf3ff436a0c717747e3a56df6afd185ca045312acde20cd50c94a6d9eb1f8a4b13d2920196690496edbc270f9017b2ab4a2b90df08c852d5f8a52866a5ae5082cd8d2758deb7c07508a76df818b2deb34b9ea8566bfcaf72c47c192ae03c4d8cdf7cb3aac7d1e581bc0d13d239aa0723028d28d2785bd4529ba001558db7720e014274d0cee655096ef2dda54a87102a25acd901c14f6abb759522a92e62102fbd9dcd5eacaa1158fd7c8ba70f5a0f17a9f8bb7614ebe09b66f58fe253498687e6f172f17a3da36806fd7d506d40b8f25801edecc1e674a4d28a977da9eb66846fe7ca1470c5c8490e22061b8be14a0b8526d1c2e1b431b238fd88446eb6e0460d3a978767d642c079cf9a53c3c47d75319f7cad7162bb3395c3156f2295863e88d6f96ff4e25a4fd1706f61db96fdc256101da6517e25c58280d65ec6e6e5bbe364c486727b991398f83351498cbd744c31eab5503d0a8317cbc01d7e3aa0750285998c495cbc352e403381f87d094c6147b28f0cd1a5e77ff662170d87caee84813361ca1db39cfa9116dd89f39e73fcda696ddd6b251765c6f45d34a52ef2b0bc4da96ffd8e289d0516d672f9e268e83932e44f8de43edde33fa7f779b61d680a45bbf1827f656246e3a4a016eb829e5a7e4e11f3d34c66f3d08674288a241b60d5ced5a133085de931c602118d778161d74aa8e02da715e524f50ebb7f2b19590c072b8508f69ae23e2a9ffc02e66c58640676a25b8ccebe7a5d99035a8973026db27ef26a0b920bb06c17475465eeeb37af282401d451d6abab02ac220615092ffc012ad6cadf74c504ee4b10ee8f9eb268d36b84432d3b80e86f260d8cb430788b8c77b188cd6e9b2b1a868750ba33b0677e4621c8c9c51a2ea172b82d2ef35948f801788393a705f22eb033151a25503c2a1ce3ac321307cc7bea766c0124333825ade02dbed3bf0d1013587a815902b9a60f604294a6300712b086c1d59be3fac6351f903bf1c57951feacc89a80dcce07d5e50b0573ac615c1214fcd5032b3d34670d423f44a91b1d8442bfd0e462970e306cb89d7092502822414b054ec083f4ba492b13a19c344f1dd31923d4df20e31c106fec2ac481742683f9e7ef49de341a0a628a3c1ed7ae4205a29b60ef3f98f3973c9629895a578ddbc45db8ffb874e06d000657f2278c4cb7b72ce6dc11a032ed0fc857b933cbce811e2917162a4f163c0e02b78f54bcdcab4f1c20dde9ee37ab474be2ddcdc090c50027a393a559c89603393926e5b59f451e3d4ca9bab71dd70b1479f5dce9147c1679debbc2a7c3208c9465744149396ec2adebd983753030f7e98ee13d37b0886b002ae55c1662449e92d83828742c0ce809881ae0dc6c2c9f96ae08c2f11ced3149cde2a6dbcb62dfac2c512664ea9601d73e7108a8598e630933a1ddb04c87036c2e9dd2849c6909bdb447155a1a8b298448330001d8e9170e534983be052b3b237990d0b3627172b6dfcf64986fa91244563d6bd2176671565ac2830028762113612fc4d0cbfbe525c7ff9b7bd4f55d3634f398a8928782e52b5d00e2fb77c10038fe0796b93987e1f682593fdeb4fd668d1d8ccc9a930abc8d15186817662e4189e35cdc58333d52fc4ef5052506b3fb6f52cbd95b9ce7e9e4d43991e7a55a276d38aad59de8a68fe98ee417f9f2fba53c478f3e2c064db8255de37756b612f3167765fb26b8fe6684b9fbb3cf11429eb08263a2482b1e63bcf6e9ab3c493beb52d102f254ffc036aca0278324320756aa0a1cc3cf67a4f2a3f8cd10db4697360a7696b688874d36c840b1f118b7086c7ee833e1f4defdbffdbb69c5d0dc60b56832f94511692508c3cc9b825addc5cbf03798a6a87d86f653411b86bd6c7e257f9361c2df5995b5ff75d01742d8570586082e054d748955c81817bdbd200aabf6b8e842e1cdab24816fac1ec6149ba5df69d113a72915a2b678067fb3c89cdcb06b51a6d6fd1d36db54c36a6dc9f18f30b97c407394d966dc46a672e0e9646ceb27c7ac465b934fec1c5086499ed240f37ed8edb2ada10e491d4aa299182c12cb5686957a3a0905478a1ac022a5d243d100559da67df4e144427a9c88df48f63265dc2c384b64479aa2bc78e04a8678950d9820c950044a2c79993bff4aabe6027ca1dff44c0c1a76f542068fade4731f9debc6e78070cc27f578728973c73351cafea6268371d5e8263f85d2c8e5f8d0491f6561a10fc31186bdb86f9c2793bea71364198819b34789a6061ccf33ac96884bcb514262c957dd261c9e464485a3588cba6e47323dacdd723238e6a442df06bab12c08cbfe6e051db149f1380536a01d439519dfe5621b106618d61ce30a1c3d690d485377f96e64ebd08edd62af059a483c68ba915677c27b784e1f996083d06a33c940ce9ced0f5bfe1aaf1b3efb0592174a8fa790924d2967968ea9305813213874f6962a6fe2322640e76c272ddcbdd0d3d0e13039579fa33ccab848fe3f37c91035591bc434942e4a61e3b14fe336197feffdc91081933eeaffd82d91aadde6420431785a7ca8cc92a10aea7599127fe5f6f57613b94783cc1287b5b56d46c134e72edcd1c16bcf0eb438c9e34b645521e7ac734909e1ea66e2c19dcb6ae2cbce8acdac14aa815cb3f54e233d3ec4429e892b0a19de4ed3a6b2b36de73a71996bf72ff906a3431e999c1c85d84bdc2a51118fbb0987788f0fbd284cdf56b5b11c0033368da1cdc296fb9c866bef0cc2a2fe52edd975a7c42794536add1ad7ccb5be72b97e258fab72ea164248c6c227eeedc22e390bc56099b08e75101eacbb3ced462f9701f0e1f4633f0481feea2e55abc1faedca4ffc27c02815a36e5042aa3abd37d6bc38890799a5d010aa75835c6011657c4a8e33008b65529a2da5d3ca8e290b13b32aab5afdbb3eb4371507ff575bbb932a9f4eaee6720b40133f8074c74b47e0b03216dcc244fd91d19582357c71c1894ab1b655874946621404c4697c14160c85092c965cf54e4fab6f3ed7d8f1c2ee1b2a2f313704dc1f041654c35aa120828c57c2aada047e6c8d51051b41ef56289c761bf4827c65953dbd8d3a14231678c1f704a6936bdf6033704ddacf57bcdc83be8cf6439214c237305f257c562013f613fe18ad47bbf797791efef36b502ba05e665fb5c91d0d09f2caf3dd5bc74bea55c6989ef73e9253a3b68b225f613ffd2ac70ee76d5b31fb0c2271cda5205fd99adec98a7f3dafeb9ab8fd4b91250a522476a890fa39b08aee4ec42afd0e74d84898e21bca60582c44e053621ecb483d2ab12a042e0341e56f89fe8571bb9dc550e0360b0dafd7fde4135165f7849f80536ee1850b433cc99ab5b79e9846062d78fc2839388939983d84a4573524a79fb3e42c7e7a86e91d81a13309515c3f86e7ccc04c217a752183fc5bc8d0b4d9da1023d5329fb9dba35e95ec3a1eb117946b84c02d5c5fa0f992ef64e6877c206aac5df77821374a430f3ec8987b6c676dd072723466df539689ded850866ffe52c9cab0cc1b2ee67930e5162efc71f37ecef8026c3ba158d93443ec7398655ec4795583c0ebc6955814cfc6ce58dd030dcfb1c2ab7dd93a4ebdbf20d4bb8ea607adc2732cf55c4887a850677ff50f4a89fda760bee342f072a2cd3c9659360a3a48d2596080da7ef4d771dda991b5cd492f2f146908b0023c03b535c0705f75edb178a05e20b11e38309e5e0e9dce40d8095b0887552bfda25cf725c9041490846079878d8bc2b6df6bf802cd5258e7c23b1ee1d7ad3ebe0e2580f88eb4e476dec586a34247619db4b1f8c39700c1751be0ece62a20319b713594126e0ba80bc94ab10c1973ce73a5be0c5b790c93f1299732aafcb660e2a971d717ba5b5977818d11a9871075d369fb4d39797108fc56257494b53a77ac477e4c26f575150e799ab37a7ec1d0df06666e681f9a112745c91ff8ffa04bfa0595ef9f1e7b3550c18ab5f554b030007aadd32b86f4cf74ba05b67fbad8ece3c196a753d2d020bfa8e04d6d29cbe05cf34d96aa986da5205000e17150af233e22bb62a42d0ac1b2f8103e0681b44aab0e5e8582eae0c03910bc8b032f8bc09cb8e13dd9ef339810755ea1fc02c115a6dbf1212212c778fcd92d428541ede3eefbcfcf6a2188aa86028365131fdaff142d9824066a4a52a9c7bf0b81b0f22f6f71c8135ebb2ba041c87ac261f17d5cfb2636fd22baa401c574c562ea4492ad56a13a6253909da423a51db3b12573af8e744ab4e069168ae06f4e5d5dcaf185a7676647060a3e5ae30c79faa7346f162afadd6a7645b69ca969fe5ae0c6de62ca71f5cb44ff8bba7bd3a3c0982a26ea8f09345e780a7ae29331340cfa6c3403c69a497633a1f6f3224e74b6728ad9cf5614a6bcc64044d3af7e90e2b9a8cb14c981472a1a42fdbc6999b584a25d17347b42e28220fcfa0dcf72b9d2d9845afe9968bd8f5a3e6996c7d6e33fa7f87bd458451958bddefe7e221e1cbf50df55b19859a92db77b58d1b335ab86b3161c6ce8c67d9d68fbe755e3b521a7de2bcfed2b17e2dde486c9b0306b406f59b2620057a0101621fc896c785b238359c71d6b0f482d5cc626cf348625fe4cf07607598cc2994d3fb5e975766ec40f8b5e5431adb3f53343955d8d69b5e5e19f953c8f3a595039ee16dba376d3f95014c765fa97508eefc871edc265f42b0a7454854218887e4"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002480)={0x0, 0x0, "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", "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"}) r10 = creat(0x0, 0x80) pwrite64(r10, &(0x7f00000000c0), 0x17, 0x10001) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0xd000943e, &(0x7f0000000580)={r12, r11, "66811f68e0c440bba4bcf609493241b2512dbb6769ef1fdb2121944155c56ea8b443729c72bc47cf6386f73b7ce88432ac6f99b63a93b89e7443b46a773671dded77dc24ba79debef1df5ffcd9e2222930e25f8b7e1873aae1853d7d55b7b3b64a43657809e8ea816519bc0c7323593b9e24a473e537db27b2a3ba9b30d958d7ff8d4867d47df99ca9958a196ce0c3c2c20e2a72af42aafe94c107a043d58527121953dfabf2d3ba6f3e7b2f09c47a4a55c3f5a3e68724037035d781567270a828be9bbe626a85ac9fe77bfa461f8903fcd4986a3dcc6fa6ec88fc174630b23dd02e9d99aa7daf6f8a7d6c4a01ad17f50051be284800", "53e73264eba58c5de5d2384abbe8dd8ea72be01bfcd6daa041050a23a5ec27d5dcf0aed87f9bcc869c6ebf1c3630de884b54dd6680e1dea34f661675f984828459321f42fb83d749067850004e9da3375748fa74a4330a66e3ea1e62f2f6413aef353e78ed2acf544d3beb96eefde8336ba9c02208396979ec975179883dacee433aefb6ff1cd41b6438d2f32e0763cdc310e834afb6b92ba385e602882f705da688e37726aef9cc058a02dab68133c46f77e2355193c18fc3c0d70c5856ca61d344026973f15aa81b370a08537ef3733f3c6e5ca3c7b5de9386956019ec0bba0cd387dd3f63606989591987a9dfb27d9225a164158997325d0ef88eae9e1fc00645611ce229cf3e40de15b3798048876412e5224b27b51f15785fc3f6dd8af730312e558319274b8ada98580edfb7097b11502fce5a5abc504db249764eef116b808513d550660c186ed0f5f4921fb7b6cc0529c1eb72438455c1f667d0bd0b171b89b519612913b0152cd1b420b2a9a4df55199a0ebe110d1fcf5eebb46b91e7ae1c5c95c48038dd738f8cf670c2de9bb3d3a6f092d5738fa7ed3d6a657841bb3bed0dee2895781d82e4e2dc6b51998e88e86ff53f21a4ae8ac780306d35e90eb2dc5a3f3a7d43f5dd7ce3807cb00600f7e8754eabcc815bbef1a5382cd7ca73cc85d53020c051882911aecdf9b0ce7c1bfdfa8d820d5efd4b60bacb7e64d98fac78810f085c51a19b89289772196915c93a0503694ed2af76b6960aecf0f1af22ada485b6ac62befdf35a0916678df405ca99925089cd3812d7b09e3f91f4daa94d464df0725249ede75cc626be7a8ed7cb87c0ed46675ed79618746c44729fe831f1cf4e485815bd9f7cdf455f6437f736858cf3026b18ba39d1bddbf58e9952b7d4b566955b80cc3c058fca3cb7e6c5159c3e7367d09ef3e8881179f51c10baf5cf29c8dcdbebdfa73cda0d9ccf8ab5af9240f88f78633be5d7d91da541cfcc01d59ac4936edf9920b67d19a1a093cfd4e594a8b369da465604212c6af340f0ade89223c631ba2db120ac9cfa9bda5b00358cea4c63d66f2b99dd3d575657609224a8874f12e80025173bfe43d35072e1ca14d097201178a8e27e62d4ecad1833aef65d12690ab97e0a15fd60302d1e7e516c3a9440e8535d0d4615d173607be209fcf2b91227519a808f51bc24197c0d63d0e522cf60427c95fae6e6c4bff0f4adb0902b8746738b1098bcf3a884850b7d18856d5ed07580965a693c8f95654cba9fb33f8c46b01347b074e5709fe982852e0f23e5a83215b3547edca8386bd9ebeda5807f3e6fe9dd1b3030abe916e3b7ba9c0b6130acd60f0c9719b3eb136bc8f3690b3f8e8f0d99f88bc6492024e59be459d5a08eaff70c6be9aa884faf2b69a915e191dd6ad34c75e30a06a714969e7a679756d8a76b1c8524deb5d6c868ef5e216369e6bb5207052fd7e5df3fcf8763ca2bfd9db080558571e851862dcd200491138dfd8e5b285f2e68d5e4968d8259c3df6d28fc5fb636ecc7d3fcb3f4af712c8b1d69f9012b07f7e34d8e5e76708c0a50b75d880b65fff32b4cd092fd1c6b2c36c36bea6a1308144ffc8ef9f6f717fe63dbfdfc0a95fc89ada3cb322a9033c5e72b5bc4cf8aadc1f730955fffde0a2881779e1d61b2874269bf1aec2fd075a1616cd3908edcd912f86a8003f39ad8330cde56d5875d495fa2d0941a07b20502f4211ed029b6546bfc50aa2299f8bcf6d524fac760cb74ed195f9cd8f99a027ab4556ccbb486d6a8a0914e654b6add10e68084c6f2e4c66a001bc09de3bf665642833680e4452a21f4686b865ba8e7ed9ac6a5cb932b25aa71a7b1e0146a4cf6390b96bd66fe6f26117b215a1262c8b8fbeed354937d55ca22a8c5927e20a620f4999bd91c0b523188a22efde8809abd90628c9593df695e4e3aad21831ff7db1d39b8839f476342c77cbeb15d12ed034c483c13cde875dc01fd14c1a8ec5529686d957b061f935cb9dbc24a8396cbc705cf7fb9d2169f7e3558ac7869fbd1c43aa9c9399ef0034366833c275000b59870c2ae4f2589c3c0d6b85b74b0a32a04bb5252e1e5201a3d082755a09720377361c5969e67842091fb92b6f7dc38abfb821bd40d0f1040595eb9481e5d28aa25605d87827e0905b350d9fd2750390f5d9025ef6ea30d15f616e932a4559d5c72b873300c8ff0dd44d4df7cd74f4f12f22d2855b2648bb6ecf492cc967cf9c32197c8ba8ec9d1e71aaf612a4dc4bc77aa49d858a6a0086160d0cabc5b31f8873d76cd4106f6a23031e75f6b97ec47a2fd26761ede9d980e40432d797da8e6e923d8bae939d925b84b944da98cd262a3009049d6983c2c17ddb1e693a24302b03497906af4323d0c5b2fb58eb6f9f5c256e56ec880e4d90e82ccc4b722e8f506217c9831d59e9de32e8f36163a43bb2ceb5cdcad19632d9d12bc64b2516cc8a28ddfb84f5c77e2aac8e1d45a7f31cae51f9fbc8a6629144518c291f2b5d5e7612d72213936c09653a91978a678eed3c90b9234ed165f581bfd1dd1dcf0c1286c1c3ce6fa77cced6db8c7ab033a565aa05193d6435ac3e45cd9957f0215cf0b45e71627f0b67dd979d04b916ac5317e73787704936f14a07988abfdc676b7a2cc5e2ace9e4a8b6773617c9067a01b984fcac1ad4d254c21c3259953e5c63fd3353cc4cb41b109c24280e7f40e8ee7f4dd232f6f774f37484cc9c7b5a7bcee9a1a9fef639d691592f63986777812c2e922a5ce336a8600856f94fd5eb3773794b252b971035b604d375cbd7ae53a42e0d1245b351bd11c02e0aaaa4ee7734c31be793398ef7a01d80a9f10d1265a3ec1f20bfb7434567b0a3e63a4a31edd15fc92eaee1e765c7dc8937a716e095bb1a6ac9cd63c5ad726c3d9b92d56a0f678a36c3ace4184139f2218f2b579458d94eb2c286e8ec8e098e62b76df1c4c9b5a8ece01172a75aadee376586c4b76de4d7b07c703eb35ffc7be32d78a94b0c8eddba4d4d6ff8712791a53ca61a92416afc7005c83193c4258a05d8a4aae34bc3d770a083df1badc1629659804152a351552c66265197ea63cc0ae3712b38b8b88ab1674ebeafd41211e62fb2bf1036c7865456478470a3e7276f2c60343d2a90b4a2799720f3a602930b656f369f59fbfd991d9c9d74fa0f46f8e7b8a37f78e212b03a9de446ef4f6d44e75f754dab9d5f0314ec30a302ba619b5bb85a474695ceef68a9b6669669387656e19335918d3d8537759b79f5a368b4b603f2891f151b8c828340811f87509f269ef4390e3b2a58fc8167b5ae7413d35d55667cab25636790be0beea3fc242af0d4a3a9c7d663fad6dbea1909ebf24fb38e95e014cc6afa979e83c21f5961a674c50300d9f9cb7e73708c316e66a9417719b3d9ae63e1ce33c437e900830c65825354ee88b17dec89dde804b7dc17203fa18072afa405a3add8a56cffb7fb691fac87c79bc09fb238e797f5a12e19ba70ef8f167ba0f45c46f32169295a5e6d86f566be3ee415b14e846bf358681ec554fa9d92f3573f41656a50b88596337ef766f98c5df83ff4f33185694a63d429e152b9f11c954f08f21b2607445be9d533c32fdb637537e94c4bd05ec69eb031c63cdccaa90ac852b0ce95d13ffa86ee708da2463d3d122dc235d50d92dfb55b49db8d6b6dc15701ec36006f55cbf4bdc45a67dc20874484175801514654a01a553b06817b179f92a9c8c34fe0d66529f6ca7f2b9b3f3724b80b6421448b96fd394a2f027864308f2b5788cd7b5098387cdeae1cb2ed26a4452ca0c5e28ef5c3c384181e9431ae5e0dfc7542a2a6037cb70468ee5787648223dc9c05696b9b28e1b8f78446798aed0f98e0092d32c356608b71d0716810fa247886f59eb360370221e8b2720654c6352da009c4bb0e7855a65d40e458739567c6f23b2c519126e012afa244d8a99733a1d1598b6c59f3ec9062e0c892f99540768bc9fe6bcb163577f05a7c1817b1806d3f766169aa1590fccc26b696a3e5ff5e338fd076f36e9713fd2b284ffd5ccbb68cc45d00249cbacf293908ccd47bfe1ce91329c75750762e91be71ef76ad2dddbea7ba8edaf70bf860a80ea8acc7183532b8f3498b1b2de9538e40b6cbc9b7f88c73b8952abd9c2d832d4d92bd2d00830d37418f33e58de35b49321654c762510b54c216a9f698772ddfe5082c8539e8158f3ea4e5b6fb4ce48dbac281fc20a7aebb5ecb021fede4c9c17e01e7fe5d8bda4e6fc6844a6014551044632654be6c519778ab18e28a67107163fff2ee942d2257d5dbeb3e19d6190ce4f9fc117e1d23f1f317baa0c377ea3b72d49ae28ecba77277a516cae36ba6ee91bcef308871efb5245cd9420bac262f3e91c96645ec5097ee802f0f103e9fcf8de5d809404006c91613e5eac580a05b135844e09e412fc728213a15ef64c035ce57c5c68724242d7f039c9b139609f523b9d8b2e90e3c85367ab09133d8c319b2d70b6d85ae0662b37a280ba8d02f80cb62e49dff9d062f536de074992998f0fe94a4a96310f262f3363d084ff5bf8bd0769a6c1f73a241b962310f21af08a8f7849ad64dfd37f665a3cedc817a788fcce1e739f784d8e336f5b83b6a1cf73225be911355e65945af07fef1190e31080d6b177b716f2244167e6eec76a275b4a3125df0eb196fd4fde958924282b47094497c1ffe0a128d6d9e409c69bb0c20a4fdc19a8b7ec4c4a54afb8746554c2846b2b713a91f678e688493db73e46ea8359357fe93e5f62542ecf874a56d7f7417f18b4fd0327b231ab73ad60d6532e533ccff78926faaab23722516a6525588c8b7fd064d12fe22994a19d20303f0761d4b6b59101884adeee090519df00f79b066bcfabbc92de6e9a6e8bf2fa5fb57d0c8cfa0448c61532f77faab33b25291bdd300a2c64c341c2a5a96a326e1a4216b4723c849ce2b6cd084693d0792571751a44ba30b80b62b4ff0cefcb5d508b93688abaf3283f8918861b35468ed4a44d4e2db9196531d9ad4d2ed8cd47457732e522289cc8cb3e45ac065075394826abcdf9787d8f0a89e79e3a053df27007f3316459cc7acb571486fae3e81238c8a329cfc2f2655bd349b29856babab75908b7d07657ffaa6e02981772e328465c2a82871fc1bc63ddbf12e2b124ace7a646e1412f95d04346e4ad5580e4de7a0b5c9deaf8e4449e222504a3d08825d30e745b7e875783cc8127f628c158e39333f07d6b1a14570b0632e1defa0803dbf8d6f987ffd3ac29243facf91ae4fdff11ea015b95df174438984598dea0ff3e820f973a987c6fa69a31fc6e5ba4920e6d7db43fa0cc6765351d781259d05caac19ee5d01d14101e369a567fc67dce565c42c1b16ab3c38a34bff78d64c7df1de4"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000045400)={0xfffffffffffffffd, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}], 0xff, "fd4b3c17ee5272"}) 14:59:08 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x18, 0x0, 0x0, 0x0) 14:59:08 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2400000000000000, 0x0, 0x0) 14:59:20 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2a00000000000000, 0x0, 0x0) 14:59:20 executing program 1: r0 = syz_io_uring_setup(0x54c4, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={r7, r8+10000000}}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x36800000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:59:20 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e, 0x0, 0x0, 0x0) 14:59:20 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x24000000, 0x0, 0x0, 0x0) 14:59:20 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) 14:59:20 executing program 7: clone3(&(0x7f0000000580)={0x100000000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x3}, &(0x7f0000000440)=""/6, 0x6, &(0x7f0000000480)=""/168, &(0x7f0000000540)}, 0x58) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r2) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x30, r2, 0x8000000) syz_io_uring_setup(0x7a, &(0x7f0000000180)={0x0, 0xa3f1, 0x20, 0x0, 0x26c}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000240)=0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x4023, 0x0, {0x1}}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fchmodat(r2, &(0x7f0000000080)='./file0\x00', 0x101) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) read$ptp(r2, &(0x7f0000000000)=""/40, 0x28) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83", @ANYRESHEX, @ANYBLOB="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"]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x2) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x2, 0x1f, 0x2b, 0x3, 0x0, 0x5, 0x41002, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000540), 0x1}, 0x8000, 0x6, 0x7, 0x0, 0x1, 0x1, 0x101, 0x0, 0x6, 0x0, 0x7}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2) 14:59:20 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r2}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(r1, r0, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x2) r3 = syz_io_uring_setup(0x4d4b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) close(r6) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:59:20 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x6, 0x0, 0x0, 0x0) 14:59:20 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000180), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={r6, r7+10000000}}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r8, 0x40603d10, &(0x7f0000000200)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r9, r0}}, 0xfffe0000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000003, 0x13, r0, 0x0) r11 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r12 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r13 = fcntl$dupfd(r12, 0x406, r11) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0xfff, &(0x7f0000000080)=[r12, r13], 0x2, 0x0, 0x1}, 0x2) 14:59:21 executing program 1: openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x800, 0x10c, 0x1}, 0x18) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x10, r0, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x10, r0, 0x8000000) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:59:21 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 14:59:21 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x24, 0x0, 0x0, 0x0) 14:59:21 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000) 14:59:21 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r4, 0x40603d10, &(0x7f0000000200)) fsync(r4) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(r6, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r7}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(r6, r5, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(r5, 0x4b65, 0x2) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x1a}}, './file0\x00'}) io_uring_enter(r8, 0x6a71, 0xd1db, 0x2, &(0x7f00000000c0)={[0x4]}, 0x8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:59:21 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000002c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x9bd) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0x1, {0x0, r5}}, 0x8) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_bp={0x0}, 0x0, 0x200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x9072ce6f17e720be, &(0x7f0000000300)={0x0, 0x0}) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={r8, r9+10000000}}, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x801) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x6004, @fd_index=0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, {0x2, r10}}, 0x2) syz_io_uring_submit(0x0, r7, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)={0x77359400}, 0x1, 0x1, 0x1, {0x0, r10}}, 0x6) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:59:21 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x12, 0x0, 0x0, 0x0) 14:59:21 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3000000000000000, 0x0, 0x0) 14:59:21 executing program 6: r0 = syz_io_uring_setup(0x31e8, &(0x7f00000002c0)={0x0, 0x84d4, 0x0, 0x0, 0x231}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x8, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2a3, 0xfffffffffffffff9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xc, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:59:21 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a000000, 0x0, 0x0, 0x0) 14:59:21 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = getpgrp(0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r6, 0x40603d10, &(0x7f0000000200)) r7 = getgid() r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r8, 0x40603d10, &(0x7f0000000200)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)="e722888e7764183a8ba27664cc5c1f0a01e903e98343b5452ea7f276727fe1e1935360c75a074b", 0x27}, {&(0x7f0000000340)="d638a0c19e6deb3c53041af0e428f07b844f617a8af788acb86c06d5047fc480c54449dc1ec163ef19a2f160cab1ca8280adf5f359ff79a91fabc1fdbe16774db1a3fea66339464357785c426cababf5fc5a6330a7125d1c08239921c08a2980eb7106df90b4b7660f30aeb68eff92f48fc665074fdafb91d0a70f61216914f46d872e9bad51e0c940735ec805165e4291dfd2b468e8a11e8fb0fba32d5fb7041383fb8ffbe0386e91a37b6dec6fb5fed3b6fa4cdcb33f4eb4a63dbf165daa9df16ff2e4", 0xc4}, {&(0x7f0000000440)="7122565a5831d69bfd703d2534eaab02d17e65a2de143276d22317ff8f31b3eee6802f68d09114dcef7c8ded96c33ea433045eaa14906445bc09a221c5f8b31409c1845e10fde4cb25e9adc98589cadc6ebd0f8089ad42f143086796fa09573bd3271f06a17f5faf6330d3122033396a797a2e40ef85c963579baafc6ba863b9f95caa6c425e389268b680b43e0770280a451b527ec2b10c0fb0250857d08144b61d14a10ebaa9f5455b20daa3ae50a9c60e309fdf71e3a03cb3fb0b990b2ff472c5904e2309e193313a24dacf71", 0xce}, {&(0x7f0000000240)="28ef1e1f961194a8c37c4eb46b6a2887e98136453fd6e74d5f8133345777227d251e4c80908e678eefaf761d7012387c04acf12e8ae70e6c127b2ee1", 0x3c}], 0x4, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r3, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r3, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x148}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000a00)="7c21a35622f78342b9fc0b38b0fcd3fbe8200bd49021cc4203a736d450c430", 0x1f}, {&(0x7f0000000a40)="7e04dafcddbebb2e4765ab5758c0b84528581c1941965ecb880da6f75453fa8a4c89393fb3ac4643a14be4d663646fc08795cf158e9b58525d871099a5401598c72a86c412c230b9e9f2acb6ec4851bc1cd6b95af53d70b9c7d965c9398a18698a3c7ac4abe795c7d09b4bc5bc5fb698d364d60a76aea5e3fbca2a1acf2bdbbf1dc31b8c5603861b187c8cac4134b066becb1825e787f1", 0x97}, {&(0x7f0000000b00)="3ca54812830adcfebc608ba0fcde0f095bfe6846d769a806a85ccdf4acfb418bfbf54d6629dc096f90441f1b85628000bb0a62e6ac5ccefc3a54de27a7288da760980a4ad8d770d7edd0d42adf2b5cca71345db04fc649b8e248fe9e70308262ac480ac10fc9aebe6cec9bef44834663ccbaad6c1a9a43795ef530", 0x7b}, {&(0x7f0000000b80)="6c1e888d06ea6459a2615af5600d05bb6909974f72ae01edcaa0dbea47ed163b5de03c047d2ca204cb8363058da25dec4cee3c0f2f51908090a549dbb6c1dfb295", 0x41}, {&(0x7f0000000c00)="c0c273ea01fcb795cbcbdf256054c0b29aa344f7a29074ae1140e4ab6fc19eca4b7f3183329fd31a8a712fd9ceffd91be762c82841103b53d43a643e3b5c1f8ffc5f79192c415b43ff72809158341bf154985114c9e2d156fe0e6397cbbc1da928157a3226824f2cfd160c22ce2ffe0c2c025540e9b2fe19749308c862f4f9d12731f00982a255f8505d036de359c3417c730ff9cb29cecba2ee15a241e1482772fa8d8fe47ef92e8aabf9385b07", 0xae}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="2d042d16c2e7c5b1f72d2e2808a33d97a0a3aae2df2bb70aab86a6fd3091bf5c7dae576568f6dbb6026dea7b8c161ff0d12d78653b2e4a9e2ca772cfe09fe108135fe44dc7d97cc514", 0x49}, {&(0x7f0000001d40)="5f4bd251960c3bc446560bfa5682f65d687c7e5613d1dfedd700debaab96f9a4fb56e2b5b77298a6070b9907bffbab52a4b4eb7fdbe55d41ac41e29232cb81103bbebb60dd1a205c0b9962186558cedf88770126cd8dafe5921920fb3cab5271680225647c423638421afbb46af1e622ec3b65560c7115c63edd4326f0022a6481229d41066c8bdc30a0d8f1bdbb14c44907454c5ac31825ca", 0x99}], 0x8, &(0x7f0000001f80)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff, 0xee01}}}], 0x40, 0x1}}, {{&(0x7f0000001fc0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000002040)="37b0e78ffc879e638165ec957dfb7ccb92a37b77519829197e73a9554db3e3118bdb6be6e5719587d7fbc2d339c870c8a0801c6ce0a6437cccf47e4393a4c4f4561e7fce71af8ff002db29e465b018a4bf69d63c6574a3ea5d237f8eb937e5ebccad92385888bf88c20ce10704fb68e1b3dd30a1cabe5f20684acb049307ced49e27c043088cf012fcaa56fa673e8d4fe0c2e7fc5c60d43aa787254670982173b6fa850366ecc41543ab18a91f88070ce5ea910966d306a5749e", 0xba}], 0x1, &(0x7f0000002580)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r6, r0, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, r7}}}], 0x48, 0x24000800}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002600)="37f80baa5f58d82d7ed83a4c5cd169f4618a35e69171020985d214697b080f9e970e2117fe16953ab89c70dac815ba544ef839e1572ea0d55230f08466028fa9d2618a41f6abef99210aff93ac5578e5cef55f12fcfd405c4c6bfc36f53966a9a58736acc4ede0a20f8dc84dc4a4a1f338900f1738d1d4ee9857be5dc6740dc3ea409d670bdf489bef6f22fe6bfee16469361ceb844f79bf398c1abd46a42f639e5c527e6f27f690dd9c2b8f336f4981471a8fcc06ba51213a32599b40e4e47a5df5c471dcfbeeefb977b0471cd7c7ab3f4ac3bcc0a4e39a0bece3bb084e7fd2b4dfbadfa243378d5df9124d88806262c6cd00fe1b37", 0xf6}, {&(0x7f0000002700)="b830872b389a05f60106289ef13e5237e37eccff36538b9e21b5f9430cce6b20bb329fc11bd60365f235083e1ece5ed21de2c821d32f00d98da94dd1609013bd61c52d8f22098c8fa63b1a8a506136109f6dce08c99eaa8e69113bd49aea09b1ef1561bc10a98899053ecbc493b3e1c3dbd44b90abe6222656acf9ea863a9a12702a5eda080fc77924075cfb4b3a1cbf13797e4d07", 0x95}, {&(0x7f00000027c0)="712af12b146563350b679d5466c23c542f988f9f87aedd6d3645e714132875bf21c9a58706f581522f4820435af82ba6d192efb0b10cd807ee9991769c66836e67d2b380b42541", 0x47}, {&(0x7f0000002840)="29f2f5", 0x3}, {&(0x7f0000002880)="413c7d7db595889b3387c7013c8b8f57bdf8b343996bfcbcc730fbf913ccdca8d947ca7dca6a6a2e3cdc9672e7443d5b33204033e622e91b4a27c957ccb3e413eb67c63202f2fbce6f181be8f4263386eea5dfbaec102d51487e1e2e2e42928f2349d7e433cc9c176b6b96345d9a12fbeeb07d221dae23175051efafdfc0d6a29a137093acc869e1ec3b713226050a13cfec", 0x92}, {&(0x7f0000002940)="9d38b4d8445053a0497e30476dab0f80c1f236834bf274945c5dbfb3065e8a9b218c4db098df80dcb1814fd2b3209d1bae876e349f14f2cd4c9032b342948de0e4fb48696d3a207abccefdf6cd8e9368a9050e1b7c0dc4e44e30bcb6e9cbc1859fa42fc64b6005836051c40ccfdd93c85014b0aae76e27d45a04c8ae2dc0ccf775ce15b6f0ce6b319f2aeca93b67db392a4899e857646a439414f738a54e85cfeba59c87d71c7b5662a1321fa5fd3b21d6db60cc9143a01e77f32fd6a8276b169cfee7b12b206a", 0xc7}, {&(0x7f0000002a40)="1340cd4723f1796d276396069f909008609021640ee139625547f296cfcf62911301174f6f606fe606951d5026026b5ff75894567d6218e824148bfd8d09296afd49d82aee0b256f5696a1662383a1230bda953f0ba0937f54fcb1da147d20ec04facd90afebd1312bba7ea1a91f863fea610e87bb8825607683965c249b55e696717f062841c2a8d61db5fee5079ce224a9f0b715cd02bb7539795715d4abc855c312e417fba15fb8a8449967b472a8c3eefefbf1f82c862018473bd5e910ae34603ecd487bd4e2055a9d05e194a75f4bb64ec36dd1ba7d77e209", 0xdb}], 0x7, 0x0, 0x0, 0x884}}, {{&(0x7f0000002bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003e80)=[{&(0x7f0000002c40)="625ec463f683393bb109356b5425dd009e38326f792d5df6f81e990cf410e18eed3635585e8f196b6d39e1a75b9e2e794b689e32de647e130cbdc534414a35914a8b302e5e741ddae67e4b5e1fc7586f5ee6583c3074f2b43daf59a3299217ff39", 0x61}, {&(0x7f0000002cc0)="b5cf946515304755b17a72d83daaeabf93e537af8f1bdbb478f0ae5e0ee8827caa2e806af529dafdd1a23383f1074cb2f4c88329a669b58241bdcec57a77801b6e089f2f85cd2a91540037d6c0393fc12ceeeb72326b7b5b229d803887ee0f5188c5751835c27a760f9c17a07f9abac02c3a08217a436276f5ccad2c761d4b7295be809d62a4561944e12b16d6c998f4efce7f0c932bf1d054e9daa036d6badf961ed219329fddd8e266ee02761309abd21d57943f79b8622c201c52ceb4ee223de45ffd20e4c8d473cf4a0bd6871f8cbcc9d2ae", 0xd4}, {&(0x7f0000002dc0)="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", 0x1000}, {&(0x7f0000003dc0)="da2a4546febcd0f68e580f69590803ecd3af4c038eb7b45f95fac08c65a4c2b69491d9820fbf0cba1164197723ba7100c4f24066b28009bf5ffb1106a0ac2dc2a0d686b56330eeab92a550666b3849b68e8bb1d28344b449396677359a34f86e394161a1560fb29b814403c6ebf0", 0x6e}, {&(0x7f0000003e40)="8ef6df15ed22ea6c2f971950505839aad96603eeb35289ff24d3076bd4c4eb313824427c7dfded93232f9196adb705248f909ced794de7da2881", 0x3a}], 0x5, &(0x7f0000003f00)=[@rights={{0x18, 0x1, 0x1, [r8, r3]}}], 0x18, 0x4000801}}], 0x5, 0x4) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r9, 0x40c, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:59:21 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x18, 0x0, 0x0, 0x0) 14:59:21 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000080)={{0x2, 0x401}, {0x2, 0x4}, 0x1}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:59:22 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3600000000000000, 0x0, 0x0) 14:59:22 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a, 0x0, 0x0, 0x0) 14:59:22 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2aa001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x82) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:59:36 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(r6, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r7}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(r6, 0xffffffffffffffff, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x70e, 0x0, 0x0, 0x0, 0x0) 14:59:36 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x30, 0x0, 0x0, 0x0) 14:59:36 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3c00000000000000, 0x0, 0x0) 14:59:36 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x96c, &(0x7f0000000080)={0x0, 0xaae7, 0x1, 0x2, 0x3b1, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:59:36 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e, 0x0, 0x0, 0x0) 14:59:36 executing program 6: r0 = syz_io_uring_setup(0x77dd, &(0x7f00000002c0)={0x0, 0x44fb, 0x0, 0x3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) 14:59:36 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x30000000, 0x0, 0x0, 0x0) 14:59:36 executing program 7: r0 = syz_io_uring_setup(0x3a4b, &(0x7f0000000840)={0x0, 0x0, 0x10, 0x0, 0x32}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000002c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x1) syz_io_uring_setup(0x40f4, &(0x7f0000000080)={0x0, 0x8b20, 0x20, 0x1, 0x8, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x3899, &(0x7f0000000740)={0x0, 0x688b, 0x2, 0x3, 0x17b, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000007c0)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x6004, @fd_index=0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, {0x2, r6}}, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000800)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x8, 0x0, 0x4, 0x2, 0x1, {0x0, r6}}, 0xd6f) close(r3) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0xffffffff8471418e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x419, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r8, 0x40603d10, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x110, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:59:36 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x12, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:59:36 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0) 14:59:36 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xb50}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x0, 0x3, 0x3, 0x0, 0xd73, 0x1084, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x2, 0x29b}, 0x1100, 0x8000000, 0xfff, 0x6, 0x8, 0x401, 0xfe00, 0x0, 0x101, 0x0, 0x5}) close(r3) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:59:36 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x1824e459f7962ecd, 0x0, r3, &(0x7f0000000080)=0x80, &(0x7f0000000240)=@ieee802154={0x24, @short}, 0x0, 0x80000, 0x0, {0x0, r6}}, 0x8176) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(r7, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r8}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x5234, 0x7d85, 0x0, 0x0, 0x0) 14:59:36 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x36000000, 0x0, 0x0, 0x0) 14:59:36 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={r6, r7+10000000}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r3, 0x1, 0x6, 0x41}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[r8, r5, r9], 0x3, 0x0, 0x1}, 0x5) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:59:36 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x0, @fd=r3, 0x100001}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="2e2f666906d335fddfd8d4c88218712848b1a45adc404fc478f6dc4a7e86de68f3ef5760cc55036e3397f801f2ee0aa0c13365636a398797e9e0af0fbd6cb9f322de18a7c0033d5b56"]) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f00000000c0)) ioctl$PTP_CLOCK_GETCAPS(r6, 0x80503d01, &(0x7f0000000180)) ptrace(0x8, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)=0x0) r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) r9 = dup(r3) r10 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x80401, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r7, 0x7, r8, &(0x7f0000000440)={r9, r10}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = openat$bsg(0xffffffffffffff9c, 0xfffffffffffffffd, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r11, 0x4008240b, &(0x7f0000000240)={0x0, 0x80, 0xff, 0x3f, 0xff, 0xe0, 0x0, 0x3ff, 0x1008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x617, 0x10000}, 0x3001, 0xffffffffecd3bb77, 0xd7e7, 0x0, 0xe0e, 0x4, 0x48, 0x0, 0x20, 0x0, 0x9}) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:59:50 executing program 7: r0 = syz_io_uring_setup(0x4d4d, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0x381}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:59:50 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x24, 0x0, 0x0, 0x0) 14:59:50 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x51, 0x9, 0x4, 0xa15, 0x2, 0x3, 0x718, 0x33d, 0x40, 0x9, 0x3, 0x2, 0x38, 0x2, 0x80, 0x0, 0x6}, [{0x5, 0xffffffff, 0x5, 0xffffffffffffff4d, 0x3, 0x1c0000000, 0x9, 0x1}], "aa5b5ee68ec0f142d936efc3547abf98ecb7", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x78a) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:59:50 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x6) 14:59:50 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = gettid() setpgid(0x0, r4) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8, 0x7f, 0x1, 0x7a, 0x0, 0x4, 0x1, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0xc300, 0x4, 0x1ff, 0x4, 0xfffffffffffffff9, 0x4, 0x7fff, 0x0, 0xffff0001, 0x0, 0x2f}, r4, 0x4, 0xffffffffffffffff, 0x2) ptrace(0x8, r4) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(r6, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r7}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(r6, r5, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(r5, 0x4b65, 0x2) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x7, 0x0, 0x1, 0x7, 0x0, 0x6, 0x80, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x101, 0x4, @perf_config_ext={0x1, 0x3}, 0x10000, 0x67, 0x4, 0x2, 0x7fffffff, 0x2, 0x7014, 0x0, 0xc3, 0x0, 0x9}, r4, 0x5, r5, 0x0) close(r3) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:59:50 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x4004, @fd_index, 0x8000, 0x4ed, 0x481e, 0x8, 0x1, {0x1}}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) getgroups(0xa, &(0x7f0000000080)=[0xffffffffffffffff, 0xee00, 0xee00, 0xee01, 0xee01, 0x0, 0xee00, 0xffffffffffffffff, 0x0, 0xee01]) fchown(r3, 0xee00, r6) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:59:50 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x36, 0x0, 0x0, 0x0) 14:59:50 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c000000, 0x0, 0x0, 0x0) 14:59:50 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r6, 0x40603d10, &(0x7f0000000200)) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f00000000c0)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:59:50 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:03 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x6, 0x0, 0x0) 15:00:03 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0xfff, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) 15:00:03 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc) 15:00:03 executing program 6: r0 = syz_io_uring_setup(0x20004d4f, &(0x7f0000000200)={0x0, 0x0, 0x4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(r3, &(0x7f0000000080)='./file0\x00', 0x200, 0x0) ioctl$PTP_CLOCK_GETCAPS(r4, 0x80503d01, &(0x7f0000000180)) close(r3) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000008, 0x13, r0, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r6, 0x40603d10, &(0x7f0000000200)) vmsplice(r6, &(0x7f0000000940)=[{&(0x7f00000002c0)="f60efa9b16c034787ecff3851d27210759707f0d3f66f01f600b", 0x1a}, {&(0x7f0000000300)="84d6a6cfba81a1fb2663cd1b0423ad894b5c69c47f9ed3ca4a804c931562d31cf96558953dcb098be7064f88f73f6e70d73ebd503067a4bc365d08d1d927acd258068102ec0ae061c2d632c1307cbe40712dc66e8a89dc44871edfa4ad48ad5ad3016bcc36742945bbc8657e7d96f5eb974e70bd8c07b1fb974dc2283c5496f1c47f3b5614cb87cdca5ecc66a7426af25a791b3b9f9db9cd24cdc07c29a91ff32dcfc372fc260fb9e8039b21189a37c5fbe55517ef3b75f2c61ea0bed73b05312c28ae2159caab9dd280ae71992bcb7eb61dd6117eddeeb26021a935adcaf6db4f6bf843a5d6c17c4d1a", 0xea}, {&(0x7f0000000400)="d311c4ac2b3655a45db43b8c662001102b4c46bc6ede919ce0756345d63268f7b5acbeafe86187fca4725979178ffd82908dae6b8e60de9d5be4735800c01e0bc154ebfc053972e61888be344cec780dd47f8210b7f6ed02d779990a8a33817776afed9fbb9bee3962e8cd452d9140262ecdd323c8bf10bc9661e4b770", 0x7d}, {&(0x7f0000000680)="fe1b600123601ed927d318c4582daa2683cc0ef4e44f221ee1b7979051a219f82b08d62927f504cfea363d157905402800c1ef87b5f4accf34cde7da6ff31d199cd4d57c77907ec743b97efd210c5e34e3f9c632647e1830dee184879b4efdeb", 0x60}, {&(0x7f0000000700)="68cdeb9c1b4054e6b7dcda0c9881819897d191f0c11e95ad51312d566a4ccedbf32b13affcc4e53a054f6df82c3438b4b026db8b91ff3d6b0b8f245ec75dbc908d2d3a5cf5d0ed50509c014f9877472959e237fa2ddafa5f254e39c8df282f1fbb80f10059bb88ee2317", 0x6a}, {&(0x7f0000000780)="5389811f17fb476c812e49f2adcabc6b92f2a7a31711666d0f16e08929eb3e1a096033c3458a556fdb5d0f3012499664d4b7182f8c8c3fae8f61ab65040382ac331a14c659b89deae2b2ba1e14e125e995f4a34db2348089c29eeef499237c40a5fe60dcaa29e10eaf4bf914483a35bde641331d4e247e35ab795405b914a166c6f7a7d6", 0x84}, {&(0x7f0000000840)="f2f089754663a089f429cf9014a3210b1fe1d979d14ac38a518153b2e9a423ff68a20d1e448343824e0274db11b30c318e7aecba7a12ae57008a40fcabb69d0fd50b7ece3ea070859263fa3399053ecac706f20389ab4dfb99cc8fe9b93c4f9326a06dbfd1ff0e9a7b63f6fd4730f4b6d71c8c5a80cf83e793d5047f8bb3c396d61a38d608020ba077961735ac556da0a421bcbbaf13aedae8b8d8ae1582a9ad46e2735bb7bb92e3f4c6c80f1c24cd87fae234d726c010cc26f28322a7906b2a9b9302b9ac2522", 0xc7}, {&(0x7f0000000480)="1f", 0x1}], 0x8, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f00000009c0)=ANY=[@ANYBLOB="fd7c4a039d9a71ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45000000000000380daef702dbca73b447b6e4ee03177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2d12ccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a7b3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83000000000000000000007d9127658b7d808ab964fbdd5fe015979031c47303749f8127f8ca36", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f00ea00830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414cfac1e010101000060e51322f65112a34727d01e76ece4e74e2db0fc319c89b8e9ef314537f868c4182a761cd18336da743f47231bbfc2f6570360aea9870e0627c7fefb90576c0225cbb3235cf4b56eb13d283ac5c5c9617fac88ac9d497eb4496a2c7436b9f471d213b56d7c132f0e4c127a1f5a6e89735f3ff61741119886fed54214b63c178ec0a5512a5e4f5c6fa226aadfb4365d70c738a2"]}) sendmsg$nl_xfrm(r8, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r9}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(r8, r7, &(0x7f0000000140)=0x7, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x10060, 0x1, {0x3}}, 0xfffffff7) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:03 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a, 0x0, 0x0, 0x0) 15:00:03 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c, 0x0, 0x0, 0x0) 15:00:03 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) connect(r3, &(0x7f0000000080)=@hci={0x1f, 0x2}, 0x80) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:03 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3a98, &(0x7f0000000080)={0x0, 0xb5a, 0x20, 0x3, 0x3cf, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000240)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={r7, r8+10000000}}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:03 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) 15:00:03 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r6}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x2) ioctl$CDROMVOLREAD(0xffffffffffffffff, 0x5313, &(0x7f00000000c0)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x80000000}, 0x6}) 15:00:03 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x30, 0x0, 0x0, 0x0) 15:00:03 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = gettid() setpgid(0x0, r6) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8, 0x7f, 0x1, 0x7a, 0x0, 0x4, 0x1, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0xc300, 0x4, 0x1ff, 0x4, 0xfffffffffffffff9, 0x4, 0x7fff, 0x0, 0xffff0001, 0x0, 0x2f}, r6, 0x4, r5, 0x2) ptrace(0x8, r6) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0xce, 0x8, 0x5, 0x0, 0x0, 0x5, 0x880, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffff99, 0x2, @perf_config_ext={0x7, 0x3f}, 0x25, 0x3fc3, 0x8fd00000, 0x6, 0xffffffffffffffff, 0x401, 0x5, 0x0, 0x1f, 0x0, 0x4}, r6, 0x9, 0xffffffffffffffff, 0x3) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000080)) 15:00:03 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2000000000000000, 0xe4d}, 0x40084, 0x400000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x800000000003, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000009, 0x13, r0, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x5, 0x0, r3, &(0x7f0000000340), &(0x7f0000000080)='./file0\x00', 0x8, 0x400, 0x0, {0x0, r7}}, 0x1) mknodat$loop(r3, &(0x7f00000017c0)='./file0\x00', 0x6122, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x100010, r0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={r10, r11+10000000}}, 0x0) syz_io_uring_setup(0x1102, &(0x7f0000000180)={0x0, 0x4783, 0x20, 0x1, 0xfe, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(r8, r12, &(0x7f0000001780)=@IORING_OP_WRITEV={0x2, 0x1, 0x2007, @fd_index=0x6, 0x7fffffff, &(0x7f0000001700)=[{&(0x7f0000000440)="45df0a1565d0dfaa9de753a10fdfbfc1796cdddeb6ac6d4ab6fbb53149cd1e246647308e26660b29811509f8ff4f52d00747c0a3503cbba00a577d4518d8f9b26899eef0427dbf3eff026eaf7644", 0x4e}, {&(0x7f00000004c0)="b52e68bf7827691023b850bf85964028489bf72ffbee254ded9eb43c4b30f8cd5572c795606734fbb62fd429cb0b2ec6c33cbf62aa", 0x35}, {&(0x7f0000000500)="3a2175b0092877d4b357a4c13b872d4245adab4d21b17b6111290d5eab519a45cb14095a4d5ee1", 0x27}, {&(0x7f0000000540)="c5ec733dca251c415f2f0fd395f7cc385c0123fe69d9c312c9d37f1f09751559c8eaa2e36130f90a8fdd17cbb833125f841db4f808dca3959b4c1fe3ba3fafa4b5a852b0b2952c9bd2606038a0b1a2f22fc777d23baccb67fe1601d98f393bf0c8f2e9af3e2b2205fc66f482bf40638cb2e7fbead6e1c5c47ab062d327d63b40bcb6db3dc883d8073b3afae0b9db6629f15b028e2a059b7f55bbd017d4c770cf9a64aa37174192752590295d582081906a54c473e6fbae6ff6addad4f6892f1650c1a54dca3d6d55dfc050c6300f674b09e1fbd74f7645fd9ea6f48c27415a36912acaee", 0xe4}, {&(0x7f0000000640)="c4b7", 0x2}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="a9c56e0bda5419d649e6aacbd74a85ff9edf4fa96804d614efbe7aa6a8798b35b863df22e95462842c34bf968c7fc4bc023d63e17ff509fff6addc4c4302fb428b9b166222fccf44f42130b42851fc13186f86", 0x53}], 0x7, 0x4, 0x1, {0x2, r7}}, 0x9) 15:00:03 executing program 1: r0 = syz_io_uring_setup(0x6919, &(0x7f00000002c0)={0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:03 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd=r3, 0xb6, &(0x7f0000000280)=[{&(0x7f0000000080)=""/76, 0x4c}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000001e00)=""/102400, 0x19000}], 0x4, 0x0, 0x1, {0x0, r4}}, 0x0) close(r3) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:03 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:19 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x6e19, 0x0, 0x100000, 0x4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c80)=@IORING_OP_WRITEV={0x2, 0x0, 0x2000, @fd_index=0x5, 0x1, &(0x7f0000000c40)=[{&(0x7f0000000900)="8c251f98ac653e86f4d94a461c476d96127929a2ceaa61a78b4da6c3ce1d458651bd8d89b896781f1ca6c19461af7604ff0d089a0821f159d89192e54e4f31c0884e7afb818b4ce1677a693046a244f378da76b818a2dd9a9b2f019a9f49ab78bde38d39187941e04ca62c0914a7862cb1abb4c7aba4fb444a78e418bc94efd8b2b858cc8c5f81", 0x87}, {&(0x7f00000009c0)="7659ee0d5310ae06513ff01e7a11311c7eae44a54deb2e9accc63cfa5916ec14f4a0a04e08f5a440f0f0233cebcc7e2c1822821df796fcb6e539981cc16e83d2c7b900a7618eb1c9a503795ddd081db12e", 0x51}, {&(0x7f0000000a40)="bc8e946b08b7916a0483397f97eeae0d08df8c5705bf721023097ff8883af91acafc0dcb2e1e1d5f3699d069d7a67610458c7bd1a8a504e3befeeb5817bb6c4ccabe98283c80e4b69ddf1c67a07026b98cfb269a337accf37b222884c95914ab26fa8fa1fb4f5bba31d4b22c1ea000297feaef0a6a9178376e2271e4a7b181170b7a6ee667649c434d9b38010fd65fa05f06334d97b0d41ed541fc506f5e2c6dd19c4e76f012a399a78d7b167551778a6e2442a44116de33198426536046edfe37894eff604e97f2c094d7c58b7eb392a7209cee494d73395519a67a845fb80722d616", 0xe3}, {&(0x7f0000000b40)="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", 0xfa}], 0x4, 0x5, 0x1, {0x1}}, 0x7f) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514017b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551538f6be853e83", @ANYRES32=0x0, @ANYBLOB="0008008000000006fd542e00000005442000500064000000049078f00000027f000001830f13e00000027f000001e0000001891f8c00000000ffffffffe000000200008600ac1414aaac1414bbac1e0101"]}) sendmsg$nl_xfrm(r6, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r7}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(r6, r5, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(r5, 0x4b65, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000007c0)=@IORING_OP_STATX={0x15, 0x5, 0x0, r5, &(0x7f0000000680), &(0x7f0000000780)='./file0\x00', 0x4, 0x400}, 0x0) r8 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x401, 0x3, &(0x7f0000000240)=[{&(0x7f0000000340)="ece643b394a724083551bb653dd5f52fc86601d9e34982695d86118850219cded4349222ce4ff2037f85a2134e954be83fde6aaf3c00356e2aa480367249cd399ec156165db96f2e139cb6528815d0867e541e9661524fe0849509879a829e691af89386ea3c150fa329cea74b5c3252b4fa329ecb2b35512af31bfbb58a6064819f0539f6d13092d8a9d05742be44ed4c644d526e2ae9e42f5f1a72d9cbb4d8d13204785d0e8070c3bf7f856c6f69c431369f05703bd87c3640180b4d3d444130c1b50f04e79858637f6b5e8a2c33c046e63aab", 0xd4, 0x3}, {&(0x7f0000000180)="ebe7b49f243ee1115e0ba6d70be340a381068eea82627ce7e4709b3ef3c4b8fc0e1b390b0991a8c42a", 0x29, 0x3}, {&(0x7f0000000440)="d28ceea3ad14fe919e127b35e5fa772bf155012a70ee6153b865a4035f89b35f1b46802ad2da1ef6828a2067dc117918d2d28420ff9d2781b459580b6a785e60d976ca4a32be517076dd0ad96a7f682d04453dd41dd04a7a9333060737a1f27d0f55c17899ad705fe2a080751e3bccdffa58a7987decfaf82b7820b0d25013dd346b93e906dc1d67e4b8c0f3d832f242fc21c6fbac997f719af920142ce4d3d70d61b8949e8337e9ae6990d9d73674a99ceebdba1929a4c3ae6b53", 0xbb, 0x6}], 0x80, &(0x7f0000000500)={[{@mode={'mode', 0x3d, 0x1f}}, {@nr_inodes={'nr_inodes', 0x3d, [0x36, 0x39, 0x1, 0x6d, 0x6b]}}, {@mode={'mode', 0x3d, 0x1}}, {@huge_never}, {@huge_always}, {@gid}, {@nr_blocks={'nr_blocks', 0x3d, [0x70, 0x38]}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x36, 0x39, 0x2c, 0x36, 0x37, 0x32]}}}}], [{@uid_lt={'uid<', 0xee00}}, {@obj_role={'obj_role', 0x3d, '/dev/full\x00'}}, {@fowner_eq}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000640)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r8, 0x0, &(0x7f00000001c0)='./file0\x00', 0x140, 0x900, 0x23456, {0x0, r9}}, 0x80000000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:19 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000580), 0x109000, 0x0) ioctl$PTP_PIN_SETFUNC2(r4, 0x40603d10, &(0x7f0000000200)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000340)) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000280)) r7 = socket$inet6(0xa, 0x2, 0x5) syz_io_uring_submit(r5, r2, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r7, 0x0, &(0x7f0000000180)="8c844d375734232606e7fc91787890702721196b424ee225c769e0d16bf92b843eb012a88e4d03ca9e20", 0x2a}, 0x1) ioctl$PTP_PIN_SETFUNC2(r6, 0x40603d10, &(0x7f0000000200)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index, 0x100, {0x0, r6}, 0x1, 0xb, 0x1, {0x0, r8, r9}}, 0x9) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:19 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r6, 0x40603d10, &(0x7f0000000200)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x1, 0x0, @fd=r6, 0x1, &(0x7f0000000340)="583288d1d0650c26ebdae57474193c6fd4ee31606532c6f0cf7e8ddd832f4ce8f70c05a16eb7388536433a25580ba0a7c2039cefd4bb80fd313a0009c29117c8292021374766cbfacfb24de43137fc7e580792c6a74aa0b5ea028ff51172578919e475f61b92b7169364ec3b9d0a4295b115af249aab12defd220fe8649a16af8dc787989d02181d46ae02c4f0a83061810f6a43cd7a9eb60310c60f09856954931fc55cfde678f5da1fb0e7a91f29d31581b79eebd88ed5113eb39f95ba18dadea59f1b6505f6cffd3e6a1967b68e4c1e1195e60032a6b451108ecbbc8795a5a5f8", 0xe2, 0x7, 0x0, {0x0, r7}}, 0x6) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(r5, 0x80503d01, &(0x7f0000000080)) 15:00:19 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xc, 0x0, 0x0) 15:00:19 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x600, 0x0, 0x0, 0x0) 15:00:19 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x36, 0x0, 0x0, 0x0) 15:00:19 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x12) 15:00:19 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(r6, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r7}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(r6, 0xffffffffffffffff, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x2) [ 2162.361951] tmpfs: Bad value for 'nr_inodes' sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004c00)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @mcast1, 0x80}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000240)="0fc98a5ca17db3933c614a640effb47fc152bb09dec8822fea9dad102883081e2c9438be60ca9e6c820e7c5e4295953ef3c92b8fa2de9dab121b0fa63651076f5cdc12785a4bf7fe8f0edf232d3b7fd46a70c176a81f58c6f4e575a4c8a128549f29", 0x62}, {&(0x7f0000000340)="750587107be35596ce3c7dbbab979c225adc2c97d99ad329435d508506ebde54a2ddf5c68483af2620c14fd61c43a4d32d12bb8e6bde02c5fc65b2bb81092b82dd42a99437a32677f0e1c5f2a66d26b4ccbf61ec52b0b9edc88d5d0e1af5d2df258bd13619dbf7b0e3fe60f5dd9eaab5d41c7febf8b33989709ef3a4597e0ff5782b6ab75971435dd19bd195703b7006c4171ff01f5a55cd60f69bb052f8e3a1f8afd715ecc8bc9f7dbb55168924384c56bbe2c3", 0xb4}, {&(0x7f0000000400)="5aa9470f967aa5def821e0411cda53493a972f093f5bdbfe94f27334d9111bdcc4d221fab1d5f8c8af2881dc32a1e1400a169ff7be3161cf62020451d6879d94cc3056d27e", 0x45}, {&(0x7f0000000480)="7199c6ee737d2c7ab4f69408e590f3de345288eb34a81ce47ae49ed4c8bd8d8208634a8b40942f0ac0eed18011cbdfb46c6581eaf33a8282bf3fd5e7f261f7b2a23365e3d4f2f6ce5cc4a07394f7c6ee56561e339a0099a8402c1667d5aa1a764ad926edc9f5eadb", 0x68}, {&(0x7f00000000c0)="329e3202f78a57ca42913dc51e8db595edd6cc6a77f9e3ff43a28669f8629ca18a823b4f05140debd8bef0ec6f890259dfbeaf22dda1eaeae4", 0x39}, {&(0x7f0000000500)="4dd34b1fc39224aad5cd19bc908504e1833b00f635f23339c09a99ff76235d3be6937ffb93fba5a5ab341553ce2793f4e5a930c40d44e3753bbec966010be75ba47c8e998ab3653a7605e8be5a1f6adc5e703a79aec0488d034c159540b320ebab9381b017253ae69e30f3c8b08b208d55febd15c09d1e4e53a9d3be0bfab1065f7a1022919ef44c30", 0x89}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="f022158f96e5c8768e8f6c57a16c984aeb61c7a3ec7f0f6e12e946d85f0117f11d4501b633ea3bafa2cd1b058324c1481defecfc5504afc456935b1a56e09f3bd08778cf84d8d9ba98875bbf5e717e90991cc7147b9064bca289517d70ff812fe97963d6337b2508dfb8847e3ff0d47a1123ee47a10ef64b1715591b1be3bdf28d4a59d5abd63ac61540d46fbe8105cb72d20c619f1e215ad7031590dd5bbc19c405e9fcdc4df8b9a80bffd4cc5455adf6409678b9bccde96549f59939a4872358cff4cab21f430771", 0xc9}, {&(0x7f00000016c0)="4bfc533b83c3ba0347b93c8eb948b2c2c33b023db541bdcd6afd7233484813b11bb5f1ac6545f0a05c805fa2984dca466325a3817efa4096e56c572dc682355213b4ebcf1efb0e931e82cbc925051d4cac51e998849942478c0b8bae90c9c83efca7946ed763ca7244c043325fd04cc973e2142c1e64f252af50e4f85022176b6f1b9847", 0x84}], 0x9, &(0x7f0000001840)=[@hoplimit={{0x14, 0x29, 0x34, 0xffffd101}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x11, 0x19, '\x00', [@hao={0xc9, 0x10, @empty}, @generic={0x73, 0xb3, "3451beec76bf219805f9cf71bfa3224ceb19a996a53a34f9dd0db996dfc49be931b1399c2a211efc38f1fd22f447afaefb9a1bea9ef91ce1b0a7edc1f8ef1982d054c9748601a3c72d03335602cb200b26f487ae8741c085fc08db606df1be018ca3623234600ffbe31da9108784116bc5c860ac9c927e3f0e214860735b7a36e6cf4bdb28817a8f7fc6076ed2641ed460961f417912c8effc9106ae72ea00d330640b125d4e8ad3ed5ed95287bd1f19f71754"}, @enc_lim={0x4, 0x1, 0x3f}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @hoplimit={{0x14, 0x29, 0x34, 0x7fffffff}}, @tclass={{0x14, 0x29, 0x43, 0x4}}], 0x148}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000001bc0)=[{&(0x7f00000019c0)="5d306e0ee48869231edb9347b545fdfcf04eb97046fe664c6aceb55e38ebb19023b20cab7a6d43396a673cf99c188c3d9d881d91badd920e49411d585afcce901334ee58d1b04c13b8b6891256c3a879bc96637cb28d6376c2762b80a640836d5f21a76ef0e2697d5804d0ef7c66b927466cf408d114ee0e52c8027efa9e5619a017eb9952fb3b17d638799cf949a0e36ba29eaedcf9571ecd65e78106739694d0ec7c047a37606432c21c4494d08c", 0xaf}, {&(0x7f0000001a80)="1b5c1bc9a5b44d1a53ed2bde5bbe8935368ed2cbbaf49ee2834f19ce9daa57395b2d8e0a80da1c3ed09186b32272ed6989bd4a30f51db40331a298c0e948d57cb3fc183730df53fb1c488e", 0x4b}, {&(0x7f0000001b00)="1bc5ab9d52d4d0af3943ae43eae7f0aa0270e45ade038478b63c5d5e11db4a1a499da0a208ca98a893f6d9400cc8b579cf1f5aa11a52d10dabae287f2cfbe9d806106a31bdd9428560f9910150aa1ee5fb824f869fde3f90c137f54080e65c54c693917680375445ad11400448f08bd679f3abf76c28969ece17f146ae9dfebf2116ddb3abf360da28fc5ea8b92f9734275aadcb5eeee46cc810d4a4bd1746d8d468c492f58ba853b9e84f867b2255", 0xaf}], 0x3, &(0x7f0000001c00)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x2c, 0x0, 0x2, 0x31}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x3c, 0x8, 0x5, 0x44, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @dstopts_2292={{0x160, 0x29, 0x4, {0x52, 0x28, '\x00', [@ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x48, {0x3, 0x10, 0x1, 0x9, [0x1, 0x40, 0x10001, 0x8534, 0x0, 0x8, 0x7, 0x1000]}}, @generic={0x5, 0x7, "2c7c9fc74db6b2"}, @generic={0x9, 0x90, "340f09015d6c557fab857ee24ca38003d775e784be13626f78f0f980ae88869f2665af6100050a118d5e3bda9c473fa798913e01aa1c4654b8a487bfaa6815b37e7bab019d2352222a686591036e38e4762059026bc9e469f5c6fe90b468e22c9e575d11123589ebb309ff60df26719f7332174b2793ab53c3788505056fb2fee89fbaa8a37e119c0e014f0c342366b0"}, @calipso={0x7, 0x30, {0x0, 0xa, 0x2, 0x4, [0x3ff, 0x3638, 0x7ff, 0xfffffffffffffffe, 0xa31]}}, @enc_lim={0x4, 0x1, 0x2c}, @hao={0xc9, 0x10, @private0}, @hao={0xc9, 0x10, @mcast2}]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x89}}}, @hopopts={{0x20, 0x29, 0x36, {0x84, 0x1, '\x00', [@ra={0x5, 0x2, 0x3f}, @ra={0x5, 0x2, 0x8}]}}}, @dstopts={{0x1048, 0x29, 0x37, {0x2f, 0x205, '\x00', [@jumbo={0xc2, 0x4, 0x80000001}, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x3}, @generic={0x0, 0x1000, "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"}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffff8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}], 0x1298}}, {{&(0x7f0000002ec0)={0xa, 0x4e20, 0xfffffe01, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5c9}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002f00)="5587148bac713ba060972d713e6ef3ba2346d7102228ca678a108c41e2c612f27c6200bc5d01356151e5ca38c655a6eb2802b5744e600e5eb9df087ad43d17cc7a6ab3b8f13ba619e40a2137bb5ee54431f0645a7b2193cd8f73ebd58640a1dd7be0ea57816923db71d292b64e5a8a15ce11f8764f462f37e363c41b79094fef8457f6a6556497ccc97817c2665f364121f56ba6b266f9c9bab021ca720ad0efea3a402d73404ce69c442ac721848bfac9e29d5bd1d4b63ac04f5458a822bcd3959eebeba5e112db4830b12f22923ef857b150e809089ace4a8b9d32742a4729c30f4ccd6e12b1b99113c8a4fdcedcbe734b3194d4561f38fc", 0xf9}, {&(0x7f0000003000)="3d65f6aeafed4eaec61b89bf1023a8e2ec41d91d1af6e614d1299d11e1d80030275ed3b80aabd413099ed8e074d56dbcef841d8f1d006e85535ac623a702eeb5089b5fd708c1025d5ea539d242c887cb604d460e45e9533104059ebbec56cc03900b2a7ab3", 0x65}, {&(0x7f0000003080)="436c7279e277ad1c66c2b83c7750cb630a5d82d2d50a83c5416170f6f5ebbf751a9c61fd654950cc627b16740cc5b01ae12b212198e5def852314575", 0x3c}, {&(0x7f00000030c0)="8037311a23010385eed6ea371fa05a3cb4f617e922a9303357fc53a39b18a1929eb7dcb7364f05ebc24d50cf09846788c6fced8f95b58dbbd861d4861ff6d4ccd8231e6b121ca7a118eb41c25f39fb342b5af1e1a7d18a7481c9670e9fc87e5bd28509abddd1b7a61f3c77219d06ed2aa6ac82b411da02406e2ed9ea100395443082551c57cbebaba3c6896ea87487c16a64426dcc2710ac2a9c3b8eb9e26fe8e8cf5a4c25b92b1f1216ce6320f137b6d3", 0xb1}, {&(0x7f0000003180)="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", 0x1000}], 0x5, &(0x7f0000004200)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffa7e}}, @rthdrdstopts={{0x1d0, 0x29, 0x37, {0x2e, 0x36, '\x00', [@pad1, @generic={0x5, 0x61, "56533ace5cd2b9825c2fc0b79abdb3929ea5f4bd2841970fa9321364e2981f0fcc77cf3ec21f90301450accfd9d7cc002aed09f4b68b3cc0b5008cafa43f67acaaa02a8b17ff8e801112e987bb8d432f554bd84ca4a78ee673d941bf3d0b362692"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x40}, @pad1, @calipso={0x7, 0x28, {0x1, 0x8, 0x0, 0x2, [0x0, 0x0, 0x5, 0x8]}}, @generic={0x5, 0xb8, "cb8306dbaff2dd49f2bfb77a71261614b3ce743b25f0c439e328f7fbd0eae2b1f55c78825bd6668e62406598b9a53541c1ac9f1933d13e2ed61fd45a34fb553363af9b46576f8e25807cdd2b3cfcdad171c248580bfdd820f29092dcb4c252797e1ea095de5cf5eb10d835f725ef84cc93ae041f373124813b774cf042ce81b799cd16ef846d6be29fddae37ad29d938e7eaf21ff55ce066862f7549e17cd92d8a3e9d34fbd0927d1bd343fe56f5aa9a7189146b46c9e638"}, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x50, {0x2, 0x12, 0x3f, 0x0, [0x4, 0x6, 0xbd4, 0xf60, 0x3240, 0x1400000000, 0x40000000000000, 0x1ff, 0x40]}}, @enc_lim]}}}], 0x200}}, {{&(0x7f0000004400)={0xa, 0x4e22, 0x1, @remote, 0x7}, 0x1c, &(0x7f00000045c0)=[{&(0x7f0000004440)="9a296f0b9135d7306383538f8995b0626eec3905ce745c1e7f6c64c20b75c4ea3714d8c3c5d6c3338b219d34b5b6e23d289c533a9d614ab7f0603e4e32969d24947226bf25641323a0e86d634266ac9de0414973d4e7d695bedbe5a08dafde2521413e9120795aa6fd4025b3cf6f3e2ce8e201fcc9537f16", 0x78}, {&(0x7f00000044c0)="05a4c58dcbe1a75e0aa2a61b166d3e90308c4e01bcd8643e7c9172600ab3d44887075080d4d791d0dafddf610fdd275d65f6c635a138e937bf8fe4ef5d1677605b6bea0e5b02961e62f63b24e2e4339fdfa4074be6f87cf72c666dc0d047f85ec62bb6581e168baf96cd3134cbf9fe9d3634cd84c7bad37975bf081b48244a22fb424f8adb74c038008721430469513e8df62ba1a255a52db4e91701e07d14d22d0c256f0d13a40679e00bbde928e14125d76497bad34844752007df26d8cb13feed813ae819d88e3084902101326187", 0xd0}], 0x2}}, {{&(0x7f0000004600)={0xa, 0x4e20, 0x4, @private1, 0x1b}, 0x1c, &(0x7f00000049c0)=[{&(0x7f0000004640)="4e5c7e3e55137cc0f6992e01323c7be7331fd9723f528f2249d05c415a07aad71588d524eca5372b9437adf22101e3aa0b6da252b6c03368a14b9602d9c4cd539afe85f30ec3f45c3857ae001ff6de1c90944b90bd56a3a22fc19e95c4a13a9452d5007af8f3fec87d6b9a2cc6b0780c2e45e81af44c89aa814103ce9eee09609c3f6d895d5495cf00f5400cbd940c189b37102cc1e002355c68f8eccc236e63a893f9b83fa8c9f357a1940b28e679620de55a79f1da86240c8e1f67763f5d98224745316db181ad1f551747f769640975935434ba873c7e7fa36ebb90dd0c3df0", 0xe1}, {&(0x7f0000004740)="8b793d9a473934358a3120a3d85eff3cd0c5f41fd039f08e72005ce5c59a30125841e5245d55a7a892398c8fa63994921618d953832a24509e66f232c9704876c679f0f06d01c0bd7fa93941753a1c484aacca9c3eb7d7965f85434a57a94de39b29951b3f360971e779527d31bf20c731a0e36eb6de55ee25", 0x79}, {&(0x7f00000047c0)="5bbd7c2e92ba20f72145dfa965ca4500211eb6a8d90395a5e393d8d8bdf63dc70deb1d4c5971ddfb0b8cf5d81725f559e17016ff5a3852743010d26769228bd34d3d70fa64816fe725ba7f704d28", 0x4e}, {&(0x7f0000004840)="049690d6a29f04173a85c8aa078b80adf4ded6701d40f4e4dcd618c53c6a14f1405ed0e0047fb2e2ea4f16e42e9e318d3c4e28ae3046459ac8c8b9dd8c205bc8cb1e17b18c005ede4ba3867318274b447bb4a46a84ae0c20b0b705609f0d8254d3aed518d221f1e2467d89eab711f02761", 0x71}, {&(0x7f00000048c0)="8c39e032a902ef639c53736db1892004f7fd80116e332245d30c20a6889ad6ac34a5d42949d6486aaf9a7b0c7cc888fb4c2acc447b6380f2015ba1d9affe75dbae60da08e5e0872ba1baf96d3530bc8021dc6ac77e863ab010a25a88f742a34d102e29dc9186fad9a0a14934af3dd30d8dd97e46a18ece9ce4788f58666325c24e948accde10f15d483e1b6799ce2d5107239ea8c44f431187bce02e727e8e83d46a1c6fb2664b782314bac5960fd222f9c8c236e7ab7406cf9d07535fcabc2575d380a722f70caaf1463a699e691008b066a3ad93b494", 0xd7}], 0x5, &(0x7f0000004a40)=[@hopopts={{0x20, 0x29, 0x36, {0x62, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @rthdrdstopts={{0x108, 0x29, 0x37, {0xff, 0x1e, '\x00', [@ra={0x5, 0x2, 0x40}, @generic={0x0, 0x7f, "4147fa8d75f34ec186847b96c764130ab884a16593cd70da431dc42a1599429245ba46a3bd536577e47ea5c46b9ba153750e19d74849c79460163d8e21cae0718822eb24f6ba7e9002da6e42148eb401e4052c367eed1dd4836ab5abf6367112496b873b05e4ea511795a43f8d4f18ac6ce1b428e67f1deaf8f28293d9fda3"}, @pad1, @pad1, @calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x0, [0x100000001, 0x6ea, 0xfffffffffffffff9, 0x8, 0x6]}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}, @pad1, @pad1, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x0, 0xc, 0x0, 0x2, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2c}]}}}], 0x1b8}}], 0x5, 0x20000010) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:20 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000500)={0x0, 0x0, 0x1, 0x0, 0x28e}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000004c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) readlinkat(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=""/7, 0x7) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = signalfd4(r5, &(0x7f0000000080)={[0x4]}, 0x8, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, @perf_config_ext={0x92}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r7, 0x40603d10, &(0x7f0000000200)) r8 = socket$netlink(0x10, 0x3, 0xa) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r8, 0x0, 0x0, 0x0, 0x3, 0x0, {0x2}}, 0x8001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x2) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x40, 0x1, 0x3, 0xa05, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9cba}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x9a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x4010, r0, 0x8000000) syz_io_uring_setup(0x560c, &(0x7f0000000340)={0x0, 0xc114, 0x1, 0x3, 0x3e, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000280)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000440)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r6, 0x80, &(0x7f00000003c0)=@l2={0x1f, 0x7fff, @any, 0x3, 0x1}}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:20 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x18500, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x80000000) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x8800000) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000100)) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2162.991291] tmpfs: Bad value for 'nr_inodes' 15:00:20 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/62, 0x3e}, {&(0x7f0000000340)=""/252, 0xfc}, {&(0x7f0000000440)=""/192, 0xc0}, {&(0x7f00000000c0)}, {&(0x7f0000000500)=""/225, 0xe1}, {&(0x7f0000000600)=""/158, 0x9e}], 0x6, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f00000006c0), 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000000740)=""/78, 0x4e}, {&(0x7f00000007c0)=""/240, 0xf0}, {&(0x7f00000008c0)=""/92, 0x5c}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/231, 0xe7}, {&(0x7f0000001a40)=""/6, 0x6}, {&(0x7f0000001a80)=""/77, 0x4d}, {&(0x7f0000001b00)=""/146, 0x92}], 0x8, &(0x7f0000001e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001c40)=""/164, 0xa4}, {&(0x7f0000001f80)=""/232, 0xe8}, {&(0x7f0000001d00)=""/49, 0x31}], 0x3, &(0x7f0000002080)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x160}}, {{&(0x7f0000002200), 0x6e, &(0x7f0000002500)=[{&(0x7f0000002280)=""/208, 0xd0}, {&(0x7f0000002380)=""/66, 0x42}, {&(0x7f0000002400)=""/15, 0xf}, {&(0x7f0000002440)=""/125, 0x7d}, {&(0x7f00000024c0)=""/8, 0x8}], 0x5, &(0x7f0000002580)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x138}}, {{&(0x7f00000026c0), 0x6e, &(0x7f0000002800)=[{&(0x7f0000002740)=""/138, 0x8a}], 0x1, &(0x7f0000002840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000003940)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/83, 0x53}], 0x2, &(0x7f0000003980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000003a40)=@abs, 0x6e, &(0x7f0000003bc0)=[{&(0x7f0000003ac0)=""/194, 0xc2}], 0x1, &(0x7f0000003c00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000003c40)=@abs, 0x6e, &(0x7f0000006000)=[{&(0x7f0000003cc0)=""/22, 0x16}, {&(0x7f0000003d00)=""/4096, 0x1000}, {&(0x7f0000004d00)=""/245, 0xf5}, {&(0x7f0000004e00)=""/206, 0xce}, {&(0x7f0000004f00)=""/220, 0xdc}, {&(0x7f0000005000)=""/4096, 0x1000}], 0x6}}], 0x8, 0x40010002, &(0x7f0000006280)={0x0, 0x989680}) perf_event_open(&(0x7f0000001d80)={0x1, 0xfffffffffffffd5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x1001, 0x5}, 0x2011, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5a}, r5, 0x0, 0xffffffffffffffff, 0x3) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:20 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x18) 15:00:20 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2000, @fd=r3}, 0x0) close(r3) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000080)=r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:20 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c, 0x0, 0x0, 0x0) 15:00:20 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:20 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000240)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x12344, 0x0, 0x0, 0x1}, 0x100) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r8 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r8, &(0x7f0000000080)=""/42, 0x2a) getdents64(r8, &(0x7f0000000140)=""/236, 0xec) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:20 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc00, 0x0, 0x0, 0x0) 15:00:20 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x12, 0x0, 0x0) 15:00:20 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={r8, r9+10000000}}, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r4, r7, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)="7f7602c3ce852d4ced63026d2dfd5ecbef8e2080d0e2794ce4d83050642a", 0x1e}, {&(0x7f00000003c0)="8be533d9d08e71f13f64dd940a596aca31b9fa943531115958b75038019ca3b6acba729dfa9981925574da9d6c5162e9e097bcce0dc12f3bffe555800d0e6117ad8cf9d30a50c4cbddbb58f1c26da158f0241ca98b5fb880aad2d2cb497c539b3660cb2d74960af27c7d69c5b946cb25a8dbd7930ab3d6763f40b1e9319d7164f46f6e1dfca46abe9624d15f4a0435baf415408cc3c0b66b30dc65278f521adffe2fde6673dd6f9c3a89fe50cde373e681c194cb53debe27be255d2443d8184a64d63a49b88be384c96125be3fe9c3", 0xcf}, {&(0x7f00000004c0)="0013581cb637e489bb37ba63a6f9133c3fdd88d58fe138ceaa5172ebfd93df76207815b3dcd80073be", 0x29}, {&(0x7f0000000580)="1e165edceaca61f343f1041ba71082b9980823612564ca68d390137935add9cd289c429e73edeefbf51e879a33c139a3fb6255cd53e9c1cd8aaee997c6eb0b809b40ec34f713bb2d54183391dd01eb909195a7e7f4d6e1905cbe6b9a9a0771094c6eb6f2ff7bf4e2a64e0d1884e879d39ba38e54842e1529b4267ed74b6191b2be84fe787090e164443bd418619e47e0413fcf3d68e334e9b0360d8f5580edd4c2f9c4da9036bfc4430e2fa7fa3b261b3b3c96417e761dcb67d30b8b7312b2284884bb1782a1a30b", 0xc8}, {&(0x7f0000000500)}, {&(0x7f0000000680)="4062c979e3b5c91cc49f24cbf6fb36b810d23a55a4305f99b2654921b78757be1952f1395652c66e445f87783542982273b04961f7c4d9e9f220438b1c514875cafc3ee1080a2d136b38e306c6e46cbc22ba", 0x52}, {&(0x7f0000000700)="556f628e7acd5ae4e5da60fc54e1f85adc9a364b05aa478c720ccbba57227165199bd8170ebbedb057c4c449d67029616d04d98d07112d4984f507f907601d7bdbc0c46552819b22492fa461dcd37d28b18734ac063bff055d5085851c89485d00f27ec797bc099b5974b7b2f39c9f1bba477d5211a043202a996eada9f7efccc8117234f9b48df1668118ed8f2db31de1841b967744eee0027243b87ab6719d616f", 0xa2}], 0x7, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1638}}, {{&(0x7f0000001e80)=@pptp={0x18, 0x2, {0x2, @broadcast}}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001f00)="8d6bfe368101f9e3c7c99cbddfa8c1a542530712210374faaa36906ed4b88d9ffeea4d3e273270aa18a71f125fb62f757e851062d8a99249f565ed27abae202a7f7aa850f36f3e4a34d9dd1441cf5598b963d44795ca38070a15f34698cd5aa7c32ea6856919225b7cfffff7276b84c77ca3165e8264e577e8a6e67926b370e8226f", 0x82}], 0x1, &(0x7f0000002a80)=[{0x1010, 0x102, 0x3, "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"}], 0x1010}}, {{&(0x7f0000002000)=@caif=@dgm={0x25, 0x6}, 0x80, &(0x7f0000002140)=[{&(0x7f0000002080)="520e887dfa43e9f5fb6189604054e146f0e9f09197ec3590e2351646d5de2e035f684a26071b73a4ac6c321186094de36983357ef23620a1f8f385000c126bb85033bf27b6c4fb29e1536594513d0774cc6951f1e77e60338b6b657944087733c3b75d97f3593222c49ea03412f38a634a2673e1e2fdb9270a8f85516936758802d94aceda248ab54e77dc", 0x8b}], 0x1, &(0x7f0000002180)}}, {{&(0x7f00000021c0)=@can, 0x80, &(0x7f0000002380)=[{&(0x7f0000002240)="a077fa992569a73ec503f9d34e7b11f2b9c79833ac97bdbbcc4bfd2ab710b2048437696c3fa797d5d3b815023959f052f84af5a5278eb652aa96ca2c08a135a56f89d2d91a314962cf2a3f550e2213304ad24120e4a5c87946cbccf2984c60f9f5d4b8ca40b2bbcede70ddbd935faff43da1066f33ce670e42fa8fd801d3b74a3318f932d9a53c280d017ad172e572bfe8fd1e1d0d1cf6130653f9bbce23f79b5a4e7d", 0xa3}, {&(0x7f0000002300)="5ceea93190a1846d014309a64cd2750805b8a5e89112509632968a04f77e84bdcd4183637f8ab27d7b5be048f8dec050eb511aa504ab1ce2d3dada500154bc81c729f2aff2fb919eccdec69513fb28", 0x4f}], 0x2, &(0x7f00000023c0)=[{0x60, 0x10e, 0x0, "893f3b7e466f1ff1c2177889b316aa035e8577d94fcffa37c4209b841e8a7931f3c311e04a2b5e5a4094100fb5a0e7862e10e365e66f67a7e2037cb5f6720d9957cf42748392ad0add9c554ae6b2d253"}], 0x60}}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000002440)="6cfbd0603cfbe470cc5626d54083e363c63c227e870c9f6226b9496c20ba055ea7fb29ce151d167d64695246b42d03b4b8b36ad3b7ae61d12a5696992c6dd280408b9fe9376fcd92f9eebcd0a17dc31aa015d15c00cf6be3d9b97373d1368f0799c56413bf36036c9c69b2167ffc9457c72e668b56398b2ef7136437d26603bd2b73f41777e80e5d91f78fcebdee534bb964cb0cc78f8780470d61885e0a6530ac272ee431b13fc5d24b961f0e93a04586418ff429b90cdc5f30e4da7d42f312d970e2aa95d9bc3f81107ca28eee0d128758ceb879cea6e329196606b69c439552d23b2392ca37c0306cd8974758ede948b276bc28066b45eaea09", 0xfb}, {&(0x7f0000002540)="c895f0317f1dc70eee8629cded222d4c718ffe65cf1edc4eee9d38658ad26dfe3eb0afc466da8e3911249a8f258813b890d817bdfd622705700fc7590e7ad46b80ae4a83e07375ed53d15bfc2fb0cb76cfa1ab7fe0ae0c4ba017653a0ea17569f709e56d0769a961c861b79183b3268c046d777683f8736f2b400da3d9e6e4e70bd6515707675e0d84be46f0463edd0e8f10bfa64567fce9a8f75bb0149ceab3015a9fb320992fbe2be1cec48dded8baf90e613dc9b35233f5486b1e1e0b28134c", 0xc1}], 0x2, &(0x7f0000003ac0)=[{0x88, 0x0, 0xe5ab, "7658fb952811359d877aef3cf27a4027b78c04eb9a4da881332b6d23887dc5364444cdccc15ea9fe564468017f3caa70518617359f23113695732945c89530e786b349f8a67b24998a875264fc7d1b6cc6c3866aa2fbd867cf2b289cb2b72a9d0aef5877e944daf8abc8a009eefa27f780f9c179181e"}, {0x40, 0x107, 0x1, "b9271f35be5b9f262558c1d4e394713c9d7be01da9f0bc6c6e8b104f2459cdbd4608ec8f7648c3ee1b00fea46e2b"}, {0xa0, 0x6, 0x6, "a960e98d13e89bc38abc2abf15c0dfae14dc8973abaf8ecf9c5f907cd6c97ca2e51880b61aadcea26f700f20689ba1049b42385f1567c292d3c65189e955a091b21e349d08bc6a137594a2aa1a158a47aa458e81cf9b09b0e96b6f737e366fc6941648ac2b46c5fa8b8399cb7a21cef08f94b3cc2dedae725e7329ff7e00247b4aec647795208230b1e17b41eeabff71"}, {0x80, 0xff, 0x4, "5ddfd163baa6a9062ae152098fa3c4957b003849de02813632de38f64d7c6f4513ea4121040b658360e861dce470aaf6b6e97f83646268b2697812b7edee5f3845e643ace2c9f4127aef20542370a26c99bd6b988ef4d1f95e7d4d62097c81ace27bc9876c5d7e4089"}, {0xb0, 0x102, 0x1, "8699b4e9b8dbbdf99397e5476a30a0ac69923aaa438d54e97a51394f7d0d9dc776e0e2dcf3b9f62011b7b40f76dab88131fd58961ef55eeb19d53a0856bec4f91596ad348c0419841393bc6a7cfc01b89ed4d037f0836b8f5eacc8562fd26c5c262dca77a9b333602ca064adac1dc989a5039cb41c738c8726fc10af27267b3273498f9a68f88c8ae166b14705c1059d3e42dfc715e4e5f20c321e6354fe"}, {0x70, 0x112, 0x5, "9331472fc980154de1cb122dee5aba5cfe2c92c13c12d449eb1f5a4fcd85e0250b4c35f7c12b560c91bafad692f8320d439f73a1a930ec6267456c504676776c3cc1ea3328d73cb844ff5e20fa95113577ff136cd924ccbfa37f17"}, {0x40, 0x115, 0x6, "df1c8b160442d41209ca15f6c1500d669feffc4c8fb7926c1771e95bb6efb5309ab78e84e34f6eed43dd"}, {0x58, 0xff, 0x2, "1f185994c36489d7c53ddb4defd44ee6a5400e1e1917021fd71d79953b11c1974ce8adc1632e1b1e2d4928e6aba935d9c812e3f860cee12fce0fd5bccc86642baa9edfec7b"}, {0x110, 0x84, 0xab, "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"}], 0x4b0}}, {{&(0x7f0000002680)=@ieee802154={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000002700)="67803a88b1e98a13dcb2605842eb687af0f8bddda8c126122dc3124c5b3f24a3e92a443e0c", 0x25}, {&(0x7f0000002740)="04853b69e8911fa13ab986771a6d41aea41c1fb22b656e041ffd01d23e3fd0fb67598403d978a05943ebca3759092b8b21d3b04cdb857908505f2e89b797835cb2430f4f01c476f051a9746fef0d36cb3415b5ab6c540e510d1dfeb220672cb79f27ed62a60921f05ae94fffed70985e217686cab93eaf4ae14c66ca4084c87487f80081338ba64a4f7b98afdddea1083f6dd72ace6b36735685c9", 0x9b}, {&(0x7f0000002800)="b3a55910d65984fb45a45f2b6ea202b4f2096de91384289932340a0b656443acffa95f5c0dad61ec12f702662a9249793f6eae96a0da8cff7593d77addd58039d43f68065f0f166a1391cba88f58a2c9ebaaeafa2cf59354ad", 0x59}], 0x3}}, {{&(0x7f00000028c0)=@ll={0x11, 0x2, 0x0, 0x1, 0x96, 0x6, @local}, 0x80, &(0x7f0000002940), 0x0, &(0x7f0000002980)=[{0xa0, 0x110, 0x3, "6ab5d90f423997fb49c00c4d5b1bdab9137b00fbe73a6b4d19608720c965b599c5c4566602a8f241cd7807c86a0a2bbc2acc44ed8aa879ce038c285a4e51d4155eb2eb76221d04eeb3eef39e14a77f413d353cee3d7bf3a620d79064d2e2472b44a31979b9df001cb7e220f515b3bfd9b084889448607de6993b65584940b70334e34960f08bab2f7ee61f"}], 0xa0}}, {{&(0x7f0000003f80)=@nfc={0x27, 0x1, 0x1, 0x2}, 0x80, &(0x7f00000040c0)=[{&(0x7f0000004000)="da1785602ea7c8e2ed11664eab18ba4a94f824bef4c7410abdb1415ef0dc398bce3957787b84a9bd9159ac5b3697f0271ce15d042915a712595f4c42b0bf4724ab141f30305c2bc0d2d3c83f8cd6ffc5d2f2ae7e93b31c740f30620d6e134e59a7ee01d00aedbb791d1ff415299af6c2a21b1d3790b4f1045f69790767fb22b137f25e07baee88150100bba1781c", 0x8e}], 0x1, &(0x7f0000004100)=[{0xb0, 0x10b, 0x8, "5714549656c8ffb81675243f917659123f7b15773650a195cbc70cfee470382d71bba8240ea4aac898bb921ed8db4588a75a7b731fc113674c13a10b33a70d29d3f81c2131d6f779f9e473d532c368db725314e7ae1cbfd0d68132b8632fa776021bba31dc01a130639ae4e5b15e7ebf72fabd0c39cb8e10aa372a13fe3187027bdddef58bbd4c1e0dbe00c099e336356a4b3147455b5a5c9af67958"}, {0x68, 0x108, 0x3f, "840b1a26a6b486cb1081a536f1ecd337a67ec4b72d145352873b053ad7ff3137e89c7af5433ef197ce9070d01602abec846cd94cb23243296ce08be125b7d76a5d877f7091d5f7dab0c8f580382f5e156210"}, {0x88, 0x115, 0x7, "aaa506afdc5336202c5856f5ac8db4e2652c7fe80193ba5bcbfb2b332282b5ad728011ade226e2e6b8f7eb382958f51471280431e9622148b79da09beeaa026db5ec3a1b30b61ecdc75e7452175da196f034621fd3483648eb90755352947118d6610ab36eea29b1f9a065e3654096add8fcd93294367d2b"}, {0xc0, 0x10a, 0x80000000, "06bfeae9ecafb51097c33d5cdb25f8b17756ffb7c4cec780965bd6dc76c3417a7c119d56a41faef3de78b2b994d3475e771cf0487de6c9d9f73d2c3411087233654d46a7a53e7ba1fea0f550cfd024ef2bb0de84b2f5805087abcafc9f505a2367081596dd0bdf9e5f04d0b3fd0614db94722e91caf0223a8b700f192c4d4f8e45be3bd7c09613aafa2643db4b9d5484428f6faa305dbb6463bfdb0e8a542e4ff2ee4f3479eaf0415cbd7878508d"}, {0x108, 0x117, 0x0, "9f247ba64b64870becd8ea374ab85941130b491bc4a96db5ed76a0963f38facc676bf4f75eefed7995f887c8be44a3b5cf670ca86977f7d67b7be90e2231ced69e0e65a55282c572ed27545506557ea9f2b4a0f97f3c59fac2a7cb1e91f9d88908b3e56f32d39ef296ea2b317a2caa39d3ab4384f8369318fcaec900854b96b00e99a98fbb3603abf95b01a2a6fca63cd3b44966ff9f191c6b906045d82c41f77edd95810d1bef32ae2b717867e92bea9bb9f20f58faacf419e161a314ab28987e0e13d112fa5899e6af99d54650bc33bc30a70005ff84f50d0a7669ec13e99be5ff611bdb7dd43c21bd84b3e921f489f4d490"}, {0x78, 0x11, 0x5, "bc145d21e89e9d2f27f8facfbd08a9bc3efb22bb95a5b4d6aa79e91b03c5ad82b425aa842a84f4c1ca584a082497ccef962da7591b4d5924ddd8ee0c505352c4ea77c53784157e287a25dafd5d62a1050e6af72f9422d7ce56b4aed50e700cf3a7f16d54f422"}, {0x90, 0x101, 0x5, "064cefe7a949d5a395f3723acc3216c2f07ffcce44c319e603ea02022560c2a1eb2ffcf1a446818c946898e176861198a894de69ad727257ad4e1fdc557a4df48e3cd9bbbc3970a606cc6688ade335472f69c146729569d299742905b63705c3c39e061031c8a7a45a58d0b5d7f716bb0f29b370e964b8087733ea43"}, {0x1010, 0x112, 0x7, "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"}, {0x100, 0x105, 0x7ff, "101bc6fbf7b35009c91cf73d3962061851a09795c190459f697790c330a8245aa37a2121b44a4cb5242039015c619049b0cfac1e5b741245ce30bc74a4739592b5ed949474b2705a42de4e9114ca97e288cce91773205b776961ad6f8925275f5aee17adcaddde69527e3fdbfcedf5f294d53c7bb68ce9a4160b2df08ec6904afd7ac79c645f0756327967e070001a9383f273609d6f2863757184966ec74338b583b9dae19c0cc97baa13283f9d82fb7be6a770fd46a9092e6b62cd118a5fdc3c8b6258a72488ebff01cbd0b7cacc53b554f533a80e6049d16088bbeac1e57ee58024f070ea0c52ec2ba3b169e3"}, {0xc8, 0x113, 0x9, "32ad1654273fc1778dab3eb62cd1e62a3135f775bc791f786fb7e096e93e4ac6ed01fa9101255715b7b96e6ad8950d1c6c0f353da5c3fb0ffe1367fb1d981f61d645f43283dd8d774a0c8726bbb79778b25f4d6d6f2ce1202bf717ae6c7832d5b90de116bad0f1c2f37bc1c9dc10bb34a7ed8764e80d0251feb3cffb8e32ef7fe4d6caac807129068bc1a56a96a05d85aff0b7bfcc15b891584af83a2c22fff1cdc7abadf6760660ea077c7c0fd5b39aa49dfa807ed0"}], 0x1648}}, {{&(0x7f0000005780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @multicast2}, 0x1, 0x4, 0x0, 0x4}}, 0x80, &(0x7f0000005880)=[{&(0x7f0000005800)="788c3fc6fbcb53a4b33f6b9c330a37e627d2779720b43f744c1b3c7334696056cd1e1d5c38e87297b9783dc16034b0e3e27e1f5be08caeff37fca61dcd5afa6f202743d2005857aa64766f3cb17c524a4370d92e82b76152d5bc767d6b2ce3a27bf6299df5281384c96b74bd8877c18d", 0x70}], 0x1, &(0x7f00000058c0)=[{0xa8, 0x102, 0x5, "8746e9d56d10bb83f59084dd6cf8973f09cd46623b9b9a011b625a42ee95ce24c51c998328782bf8b4108d73e45f914b960ed05c4c1874393cb4edf86a168b4d4bba634e15c4bcc2d20028628c5f61eebd485ecfdda7b707ba5dbd0241c85f6405a81fd5e5ac6254a25b9d71c689d4b627c49eb62ff7eda5dcbc083d9ac11c183983e7a2baccc71f5a29affd64990eba59ce17d531127cd5"}, {0x10, 0x109, 0x8}, {0xc8, 0x0, 0x4, "25b939278afedc9462996a244b50c7c707e5835b3def469a5637465a682d644b567c358c8d1ae1e897d6e8a603fdb0e0117b26c0d8b909b6cfabab4665d907381ff5b458504df3be56f392f4c24c1c736fbb61d693584ec8f8a72d2917cb8e1731b928f5011db7106452279d28892be95ea286a211233897b7793a09ddbe1754c24aefb2ecdfe8c17096c59da650ad46c4d40fe981770dbc541cd824bfb7660618c17cbaf989b6b28ca3b3f870e68ea6ec29e3"}, {0x78, 0x110, 0xd61, "1f213a0bb41d55c1afa438b89b4ec0aa2737a4df103cdd7372d054ccda9874706e7adb2d98c2d4537687ccb4d12f4d1d71c422c798e78107df61ba8ea0c1bc62f1d9b2d404bd2f2d5917a4e0ec41ed35ddbd0ff7f4dfd8c0f901ef62325a922f64b850ac254fac"}, {0xf0, 0x0, 0x6, "7bf2ab0798b951612316aea1cf51559351e6c2f3e3f1f0dda123436619187c843b32288db9ae4a8c7411ee2caabfb42de8f92336c70932aa76c68809a4798e4e2e6046c35c1726318c96fa9e80e1d64dd511c2538e7583da2752698c94206a297ec06c1d19c38b3c66bf6292cf63310f3048cd71f8389ad60c8985d8b636c2ae77b4525380cf9f87f9b36f7c6577138358217b199dee7c8bc7767835dc513ea90eb6082f7939ef45d71c63b14f5f4e1d0b96352ba64aadcfbfe9c806164d6268d990677ae47d38a18b4b8877a3307580fe2484b5562fe0d7bd"}], 0x2e8}}], 0x9, 0x0) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:21 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x18, 0x0, 0x0) 15:00:21 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) syz_open_dev$mouse(&(0x7f0000000080), 0x9, 0x28c160) openat(0xffffffffffffff9c, 0x0, 0x100, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', &(0x7f00000008c0)=[&(0x7f0000000680)='\x00', &(0x7f00000006c0)='rfc4106(gcm(aes))\x00', &(0x7f0000000700)='/dev/full\x00', &(0x7f0000000740)='/dev/ptp0\x00', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='),#)', &(0x7f0000000800)='/dev/input/mouse#\x00', &(0x7f0000000840)='/dev/input/mouse#\x00', &(0x7f0000000880)='/dev/full\x00'], &(0x7f00000009c0)=[&(0x7f0000000180)='\x00', &(0x7f0000000980)='gre0\x00'], 0x800) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r5}, {@in=@dev={0xac, 0x14, 0x14, 0x44}, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x1, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(r7, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r8}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) ioctl$KDSKBLED(r6, 0x4b65, 0x4) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000ac0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2000, @fd, 0x7, 0x0, 0x0, 0x0, 0x1}, 0x80000000) 15:00:21 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@sha1={0x1, "04bf3e49ee1580b74e9c29cf868c33baf4febbf0"}, 0x15, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x80001, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000740)=@filename='./file1\x00', &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='debugfs\x00', 0x20, &(0x7f0000000800)='^(}+\\$\x00') syz_io_uring_setup(0x6d3a, &(0x7f0000000640)={0x0, 0x644b, 0x0, 0x1f, 0x88, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) sendmsg$unix(r0, &(0x7f0000000540)={&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000340)="d1d1abfdfa948cf3dfc9d2659b069cabe7f3f7cd7f2b37b5d904f3db42cc6221e6f083c64a6165525c578648d8c1273160346a679f3280cc0969ec1158d569482d0b26bd47ab0a756ab0d0b2fcfa4216591db0a4b46b160906fcb265949e83196b291f462388fa809fd6b3fd1e69434b81c10b131808264d2ae05480b23dc9fd4c90c030d83a3372330d58cc9c5c8ab34f0c46adf7816ac5a4573cc67b2e5169407ea989c818e08aae2d8c64da2932eef85b9a6b93efb2861f262c60c5d2968df5c795b8f1db269ee549dc09f57e2787cf93381a599542cdba5ba6ce8fb810245187654965a53752ec1e9b2ae3bb4d0a5c681b10925c8a508a2bbf", 0xfb}, {&(0x7f0000000440)="ceaab5f3ce5e6e795df77d248263a398044d87c000d34cafa2bda8a3998d7af6c24aace78f05a3f7be486814c202e6a36455347e9312cc95c303d5e17ca27a4c370f25afcc955071bc16a75fd8fbea468028b48dec72d9e350c91aceb9a4fce75a20c0ea3603799bdd7bd9691e004c1da4d77fba9ca35e0bbca824cfc1c16c15c7114cc7a084e16c711b28982c9251db6de72f2257e6fbc4577fa43c185c585affda3b8605fc47817f89bbf34ab7fb5d3d9e289dd172b907c2b61e2bf026217e8e138dc40c3bfd9f27fa21e42d3729ccd8e8", 0xd2}], 0x2, 0x0, 0x0, 0x4040004}, 0x4150) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r6, 0x40603d10, &(0x7f0000000200)) ioctl$PTP_PIN_SETFUNC(r6, 0x40603d07, &(0x7f00000005c0)={'\x00', 0x1, 0x3, 0x80}) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r5}, 0x3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:32 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r4, 0x40603d10, &(0x7f0000000200)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000540)={{0x0, 0x1, 0x200, 0x3ff, 0x5, 0x7, 0x2, 0x1, 0x6c81, 0x8, 0x0, 0x5, 0x100, 0x4, 0x8}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000001e00)={r5, r6, "df8a4b2ea5d3d6fd16df91a7ed5ff347142bc60dc8f2322ae6483399ff8baa2e17fde44dd654a63e76e6d07011ad96fae50a2b8b66e96f8fbf757ee698e1717176b764dd2fb8c17af53da2bfe99997e5958f694bbe867edcb1f57614956b095e49cc8b42d7afc2628aee11cd2a0c7b774e75d65e9aed1ef53c14a02ff0c22cd34a62ac893adb5c9104762944789f3609b3ecc0c9c3480dd33858eacbcb55d35a7f11976de59543c3d3e9e560f063d32031dc865e5bfaeb140bcea5834391953f94adb870fb3e83f7d56954739af76b52f78f4fa5864e3b2fc8cb3149f5c1a86705dc33c8a006f69afb25db34e9a214d3220a949d376406ceaeff51d297853b7c", "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"}) close(r3) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:32 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1200, 0x0, 0x0, 0x0) 15:00:32 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:32 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1e) 15:00:32 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000008c0), 0x4248645a38d88885, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r6, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0xd904, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000940)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) pwritev2(r5, &(0x7f0000000880)=[{&(0x7f0000000640)="a37c16d149d1c2401c34d08695c9d5fdeb5fb9c636c3bb22694f8081249c6eb87af7e0194094ac826d42673df8249e78c07617f4994a1787e8d06897107c1bd5b2cec50bb211940e7c0278898fbf7e8780c2f944e628249fb9a1f6876d80a0ec5d5ba6e03e864f7f946efd7bd6d7a7e6ab4596a8d3952716", 0x78}, {&(0x7f00000006c0)="fd9c", 0x2}, {&(0x7f0000000700)="d743215b919295e0becf325725f52272e49900ae5172b29473ce789e3d1c10d7a597bbe4f478900eed1217952812740de6b17ecb12a61e3efe1c1691bd4127ef5937d289d48f34802a3641e35d9bb0491870e6db38eeb5fa25de5e485da20f43becda951fabc6bdc0eb79daaaa7eac8a1ddea4fc52d884162bd9a52b6105eefffc25a1783c0e2e6004097cd14853d399bc8faf182c0707e02d9d7c6cf3d5890e460fd18ed2b244f8", 0xa8}, {&(0x7f00000007c0)="64cb66417de7ed41c70299887bf2588b3981099a63d2e9f4f5e63d237949d251c6aa8b5e10bbb3eb101a9841edff7b15cfe2a4ac81f45c42abb50e28730c20bf4ce23f6580d60a8efba956654cb9f6455f1429f1c158d6d91a3398b7b846eb040e24375e66425f2f6237a93e6306f15f1d38675c3a41bd69578f655b234007ea1e3b9307002bae881dfdc6645d1d334a4338d7ee050104", 0x97}], 0x4, 0x8, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={r9, r10+10000000}}, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) socketpair(0x27, 0x6, 0x2, &(0x7f0000000080)={0xffffffffffffffff}) syz_io_uring_submit(r4, r8, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r11, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@nl, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)}, {&(0x7f0000000340)=""/225, 0xe1}, {&(0x7f0000000440)=""/167, 0xa7}], 0x3, &(0x7f0000000500)=""/228, 0xe4}, 0x0, 0x60010060, 0x1, {0x1}}, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000900)={@dev={0xfe, 0x80, '\x00', 0x3a}, 0xcc5, 0x1, 0x2, 0x3, 0x1f, 0x7fff}, 0x20) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:32 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x600, 0x0, 0x0, 0x0) 15:00:32 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = gettid() setpgid(0x0, r7) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8, 0x7f, 0x1, 0x7a, 0x0, 0x4, 0x1, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0xc300, 0x4, 0x1ff, 0x4, 0xfffffffffffffff9, 0x4, 0x7fff, 0x0, 0xffff0001, 0x0, 0x2f}, r7, 0x4, r6, 0x2) ptrace(0x8, r7) clone3(&(0x7f0000000400)={0x800000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0x13}, &(0x7f0000000240)=""/27, 0x1b, &(0x7f0000000340)=""/135, &(0x7f0000000280)=[0x0, r7], 0x2, {r3}}, 0x58) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:32 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1e, 0x0, 0x0) 15:00:32 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x24, 0x0, 0x0) 15:00:32 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x5) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:32 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1800, 0x0, 0x0, 0x0) 15:00:32 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x24) 15:00:32 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2a, 0x0, 0x0) 15:00:32 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3, 0x400000000000103}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(r6, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r7}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(r6, r5, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(r5, 0x4b65, 0x2) io_uring_enter(r5, 0x49bb, 0xabe7, 0x2, &(0x7f0000000080)={[0x7]}, 0x8) r8 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x10, r0, 0x10000000) syz_io_uring_submit(r4, r8, &(0x7f0000000180)=@IORING_OP_NOP={0x0, 0x4}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7fff) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:32 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000340)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14}}, 0x28}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x34}}, 0x20000051) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={r6, r7+10000000}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index=0x8, 0x54938d49, 0x0, 0x6}, 0x5) 15:00:32 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e00, 0x0, 0x0, 0x0) 15:00:44 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2a) 15:00:44 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xe00, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(r7, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r8}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(r7, r6, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(r6, 0x4b65, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2010, 0xffffffffffffffff, 0x8000000) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000080)={'\x00', 0x38e, 0x3, 0x8}) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58aa, 0x2, 0x2, 0x0, 0x0) 15:00:44 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc00, 0x0, 0x0, 0x0) 15:00:44 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x45bb, &(0x7f0000000080)={0x0, 0x7560, 0x20, 0x3, 0x30c, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000240)=0x0) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/current\x00', 0x2, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r5, 0x6, &(0x7f00000016c0)=[{&(0x7f0000000340)=""/153, 0x99}, {&(0x7f0000001740)=""/187, 0xbb}, {&(0x7f00000004c0)=""/80, 0x50}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001580)=""/201, 0xc9}, {&(0x7f0000001680)=""/32, 0x20}], 0x6}, 0x0) close(r3) getpgrp(0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:44 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x30, 0x0, 0x0) 15:00:44 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) flistxattr(r5, &(0x7f0000000080)=""/81, 0x51) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:44 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 15:00:44 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x6004, @fd_index=0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, {0x2, r4}}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x6000, @fd_index=0x8, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/137, 0x89}, {&(0x7f0000000400)=""/135, 0x87}], 0x2, 0x0, 0x1, {0x0, r4}}, 0x0) close(r3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0xc6, 0x1, &(0x7f00000004c0)="f57b0ed9c60302ea6a06fbfbe8197b18d9d022530d3331ea16898aee44258ce78ae9b09d2fe022e114aff14e69fced616ff9dce105996e1b11d1dc30af1380065d4e", 0x800, 0x0, 0x0, {0x2, r4}}, 0x50) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={r8, r9+10000000}}, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r1, r7, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)={0x80000, 0x146, 0x11}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x86d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:44 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) r6 = pidfd_getfd(r3, r3, 0x0) syz_io_uring_setup(0x1f20, &(0x7f0000000080)={0x0, 0x1720, 0x2, 0x3, 0x21b, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000240)) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:44 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x36, 0x0, 0x0) 15:00:44 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/150, 0x96}, {&(0x7f0000000080)=""/14, 0xe}, {&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f0000000180)=""/100, 0x64}, {&(0x7f00000004c0)=""/244, 0xf4}, {&(0x7f00000005c0)=""/172, 0xac}], 0x6) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) quotactl(0x8, &(0x7f0000000680)='./file0\x00', 0xee00, &(0x7f00000006c0)="51fe2bf177f9ae0b0245c80e33576cf889823252cb27af2e8c16a8541f28453697ba1c6fb6c134ad98c3efd1923da8ffe271ecda4bd9fb0c2cf4fc4d") r5 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5, {0x9}}, './file0\x00'}) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r7, 0x40603d10, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000740)={0x1}) open_tree(r3, &(0x7f00000000c0)='./file0\x00', 0x89101) 15:00:44 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r2}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(r1, r0, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x2) r3 = io_uring_setup(0x6af, &(0x7f0000000180)={0x0, 0x7e74, 0x20, 0x1, 0x63, 0x0, r0}) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x9) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r7}, 0x0) close(r7) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) preadv(r9, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/39, 0x27}, {&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000180)}, {&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f0000000340)=""/136, 0x88}, {&(0x7f0000000400)=""/205, 0xcd}, {&(0x7f0000000500)=""/188, 0xbc}], 0x7, 0x3, 0x1) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:44 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x5, 0x7, &(0x7f0000001600)=[{&(0x7f0000000180)="14c13a984db0ce4dce34b4ee4efe06c3802cd42099552c509bc41ca38e192cc5eb", 0x21, 0xffff}, {&(0x7f0000000340)="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", 0x1000, 0x8}, {&(0x7f0000001340)="88d44db27cbe694255e8367df0b749aecbe9283a3b565d8348ee044cf92e2caa737caff04e3d59501480bccbf8a11c19275ef67054f2fe0f60d44e14c77ef8f1a88a7ee74e3982abb436457e931e4971ca9d8d69611d827b181524f16448b8a59f2a00d9d8ce957923a63960223937da6d37c6dedf0228d439726b930a42e0a36ec3ec80de1596b9e3fba6215960959094d7ad5c6be294bccddda1b8441b4506cf9ab8a75e895bd3b5abee3b24abc14ca39746b13eac24fce1dd841b35b2f1b29eb6efaa7b6b730e", 0xc8, 0xfff}, {&(0x7f0000001440)="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", 0xfe, 0x1000}, {&(0x7f0000000240)="0fffd5dad4b0d1de1cde1cf786ea76faebb7149054ed7d2f771d279a91daac7f03edaa7de864ff2ab89906744ca13adaf12f8439f05fd323c6c1aa11cd38c72a93f614f76f68c8aee7c25be1", 0x4c, 0x2}, {&(0x7f0000001540)="5ff4f8158b6bdde7357fdb7fa05cd421786e6acc7124d998ac339087cf44a1c7", 0x20, 0x6}, {&(0x7f0000001580)="3d9783aec74a222488c342f1fcf2f460c8d18122fd8cd70892dafc9bc70ae7a07f70d11d679d202b24831900116e9328db6249da8f6d03c383fc16e384932c7a6284757d2097fe5711d6566b391f1ec202e236ea82add7f9cae83937a0b0d45bf8ad8145b26b398420e454b45b870971cd40fd11c87b6cde", 0x78, 0x7ff}], 0x30800, &(0x7f0000001980)=ANY=[@ANYBLOB="687567653d6e657665722c6769643d5367d134b2fe1941e54fb0b1be5feb18a43dc49d6538200dd3845c4ab387f736bbeafc627a", @ANYRESHEX=0xee00, @ANYBLOB=',nr_inodes=g22\x00,gid=', @ANYRESHEX, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c7569643d9c677b6c303f367d91fd3938e3490bbcfb71a300eebaeae20e13000f0abf8b4b357386bc9c6cda54c2c13e1c01793518f508d7b891d677d943c26ff54b4fcad5721c7e4e7f5693cf327053ad09b1f7a1ddd7c03ce16eebbf469729668a78056ba16aeccfa4fd0c3b229dd20e5e20a00ff4012efebf2d3e067358996b0e93786540325f40d57b", @ANYRESHEX, @ANYBLOB=',huge=advise,size=4g2x-p,appraise,\x00']) syz_io_uring_submit(r1, r2, &(0x7f0000001780)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4) getpgrp(0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) read(r6, &(0x7f0000001880)=""/239, 0xef) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x6004, @fd_index=0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, {0x2, r7}}, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000016c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x800) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:44 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3c, 0x0, 0x0) 15:00:44 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x30) 15:00:44 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x129180, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r6, 0x40603d10, &(0x7f0000000200)) write$binfmt_script(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f70747030000afe3298c56da2cc070b6099f9106d3f479810f8b795072c63a1c01d06c3665d492150698b1d7d9afd3182392a5d98b780dc8d962682964232e35ed9a3593779c630d4d180670f98e7d2fc6f5ffd97cfda8ea5ef53af08f977c4ae9e507a574fd132e12d2eace6dbf5d800e72b046e2c31e4b864cd1d2a355dfb5bb185860368cc34afed55665886864bb35e4b39b286c19a278af601dd766e4e40105d25d5a0829accb7111f99b81900c151cf1ecb013e836be4690a2dd8ec2db6643a215cb71dcb3f8d2cbae859e9a9da62f297ca3aa360d2a23e03ea35de5cc86204abdfb18b"], 0x25) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:44 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x600, 0x0, 0x0) 15:00:44 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) ioctl$PTP_CLOCK_GETCAPS(r5, 0x80503d01, &(0x7f0000000080)) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:55 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2, 0x0, 0x0) 15:00:55 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2400, 0x0, 0x0, 0x0) 15:00:55 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x36) 15:00:55 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1200, 0x0, 0x0, 0x0) 15:00:55 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) sendmmsg$sock(r3, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="c46034ff0f8c521ba88b72131e64bc51769ad379cbdc2da3a207244fce69e65184f5b8e0a437160c66c5a1773ed3301b6028ed8496b9a1f7d8dd38f72965", 0x3e}, {&(0x7f00000000c0)="3ddea3150cfac099dfafb05c22755261b3e22099936d0e6c90ce7f96f419d1ddf15e8193f84b663db5c8364a", 0x2c}, {&(0x7f0000000340)="50cb34bbc44831dfc8a0ccb7d52e5243b2fcdbd6296ef3fb217076de0e934c26256e5a8713f90fd27330e94440252d057a130bcb32dcfc3dbc8ebe136815841547ef2a7f2b36cf96eaae0b926cc8d372d9a34ea3c2a0b33f5296cb4542853575fd809a0af2f42cfbd32cdec5f1c3a8902bd2b6be9211d58fde7c5104d9bb7026843aceaedb9342a63d917992d2f8fee1f5e549aed2d71b39209f", 0x9a}], 0x3, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x18}}, {{&(0x7f0000000240)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000400)="8cff838a0d17b2f4d435c21ab943e88eb5d86102b036fa22f3f8fe0399ca165f773155ee8457b00629dc4700b34c66182259d3f623b6df8151e863a90c5b676abc4717ecfdffd884db88df46ecbf7a023ba1a2447c2e2169181ba71092a38849137d3877b034bf7bd8a71a52637beba8ad169d89131ee156b91a4d4a2ba47f1872667fd24d2e62af35e82735f166c336d5f3897b45fcde004e85ba6a912852c7cff7b655d5415639160d6f18820ba887b77b4f5fa2ca7473088daf7f88073b73a220ba9d5e0338ee44895a9da9be", 0xce}, {&(0x7f0000000500)="91976940659414884bfcd98369a9dc5bc987e141e174e5a63afd937bae8d24a01d10c6d52a2a7c314c2207689c8aece662ba724b1c8e19cb54afb998d03a2599c085", 0x42}, {&(0x7f0000000580)="854813d8d8648614b97c385dadf0d7f6815775d3fef8d3889fb23a6109797d7b291153dddbb463a233a4dd838ed206af09fb29dc5b76c77117b9e0561a91b8d92c7b27e2ac2e1456a6cc87315a82e9b3442ed0debc1e", 0x56}, {&(0x7f0000000600)="a3a93b6abd0e6ad6b654b5e0117bc9209fd4eaf5419f2018a1f099cafda64e19d27a2548a06ce09c701cc5b6a7cbe6809414c6510a0e3e47453e034ef1b4ac4ded179b2b72191d733501b7da26eeb05eeb39b456258910be6f9479038d8e1b536198117b41b158120b6275739edecfecfa50559d629b1d62d2d016090f4299eebf244af4060c78b10acf544590004482fffe446bb38875de6acec817674aeed2ffea67fdc56440498aedf83375ab5c78ca516b764459412b14278f2adc3e4185e001732b5bcc6b392894074c91cacb8681a71faa", 0xd4}, {&(0x7f0000000700)="976231f3577aab5f67bb7d79889d977ad181ba4039cf38763fa4b864e128a86acd01b1e9fc6572fde45ba4e9330bb9e3d63826cfe156e865c54cd5fe29ee14be7100929bb6935de1e143f8a8e118f77ea1698a53", 0x54}], 0x5, &(0x7f0000000800)=[@mark={{0x14, 0x1, 0x24, 0x7ff}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffc05}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xd91a}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18}}], 0xa8}}, {{&(0x7f00000008c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x2}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000940)="6504a106c2edd9d0e25f7a1db0588b809b389560bdb6da9fc94862b1c8183f6dc89ba8cb3a7a4da40e7efde8e7f77d479f6f85617420a5045cc89d2f8d144796dd34a032bb5ce9d5b7a9ee55b35f2369ad45e81ee1a989546c3d4050df62929ac84058f0279eb7e67fe277d0c8ae54fac017354c4d1e38ebd4ba26949dd66afad29f729cd9643e2a127e2db3e0d9894e837a2b7a1db851da0b013a3a4b0c25c7b5de8817ffadde78a66a", 0xaa}, {&(0x7f0000000a00)="dd6d5019359186bec6877ae7c8007acb46e5ca094770c7992d3422ca1fcbbf8c59a52a20fa0d1271ec9039f3817c5e783f1d03624669e19f9cd40d21467d8fed01bd2d8506c2792ef6f718dd8a5c0b571154e06a7d4ce0aeeb11b74fa90c84240daa30764b84361b883fe3de21a7bf5cb3a67c354785827858e24cb9e7bc98b37ff2655b78fa9305eed1732e1e3d6d7d60fb0bd5bbc2e7f9869ce6b6b5dba8910388e574ad219a8210fa4c71d40bc026ca6933ab4733a7422b9e9060e4ef4a2034a8229a0c", 0xc5}], 0x2, &(0x7f0000000b40)=[@txtime={{0x18, 0x1, 0x3d, 0x2c}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xf323}}, @timestamping={{0x14, 0x1, 0x25, 0xd5de5f}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0xd8}}, {{&(0x7f0000000c40)=@ll={0x11, 0x2, 0x0, 0x1, 0x8e, 0x6, @local}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000cc0)="629a82350c80b4037f871580fd0f5cca34ed", 0x12}, {&(0x7f0000000d00)="560b9c1ede68b65b1f9bf2d757b584482073ecc70cb6b69ec5c321e0b77d2289b7518b66e80572d6d810105c2bc696ab532b39783622fa3ffd5757930f847c1f1a4e97bc35406dd2930c1b0ec9071f41c78712723de5edc86bbef393810875cf89300735d10596dc2c3bb79885b5f75f242a3de3ef88", 0x76}, {&(0x7f0000000d80)="6557c9bd239c1badedea16b3e3885ce1ddabebf2bb19b14b046b40a8f15d1dcb67d8c396b7635fa170be42d7fdd23c1018ea6cdda7d81dd7662bcb0f5d56dbb978c5ed4491c5c92be6144560d39ad71a932b72aa5da1fddab1ab74e3e0b505e551eae6c61bc562ec20", 0x69}, {&(0x7f0000000e00)="8ca87605d7793cccca4f55b3f5ff30c6ea6c3c2422df38f737589f065254751b617abe2821daf7e7cea6fbc4d985c898fc2108352a9d2d12a3c1a90fd65175de0c6395176c2d5fb07c5b90d9d1861ceda6ccf950bfd911d6f70c7b755d72aa40cf502f61c77722539cde22493b48a4cfa6", 0x71}, {&(0x7f0000000e80)="878e986c42463d4529ce7c", 0xb}, {&(0x7f0000000ec0)="c1d68c0471226f0a32fc0e37caaefffc8ef509c514a4ddc64c3f8ea88ac39d74c1c9b90f644de231474c23396f4dcf6bc73fc0fe52aa4e6fbf2e804bf1c3204a3f6a854f955c493655c4fde9b8d6ddeca3b03e3627d95a08d328ad21eeb209e3f2c26f2da095d5944dafa09335e0e3e494238c673733d0280a3185f8df1b260c53", 0x81}], 0x6}}, {{&(0x7f0000001000)=@pptp={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)="f8a3e865fda088397437e3e979cd627fab", 0x11}, {&(0x7f00000010c0)="09a65541ad768439c23fa961519e84d4148d05b5dba1d890e2f61a61a256b67e9d2bbb2cdc682fffb2359078d54b236af1de1a1e622273930b038c3079dcfabfc0cd5f8b2bfc64efc512352de659270d86014c99fe5fe54ef08a67b132f0db320a7b4785f76cbcef44f9c28387751fd021d5d49e0565f1db3a881a777807deacbedc7118204d1ee8ca014b95e4e06eafbaa1ffd45bcec75aca90374740f388d6b0e9b5fe5d18d09dd119c086cc32babe6cba19", 0xb3}], 0x2, &(0x7f00000011c0)=[@mark={{0x14, 0x1, 0x24, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0xbaa}}], 0x30}}], 0x5, 0x40000) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:55 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xc00, 0x0, 0x0) 15:00:55 executing program 7: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) r6 = openat$cgroup_procs(r3, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000180)={{r6}, 0x7ff, 0x0, 0x7ff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:55 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r6}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x2, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x7, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x6004, @fd_index=0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, {0x2, r7}}, 0x2) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x80000, 0x1, {0x0, r7}}, 0xaffb) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:56 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1200, 0x0, 0x0) 15:00:56 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1800, 0x0, 0x0) 15:00:56 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3c) 15:00:56 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x276101, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:56 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1e00, 0x0, 0x0) 15:00:56 executing program 4: r0 = syz_io_uring_setup(0x7237, &(0x7f00000002c0)={0x0, 0x1fffffe, 0x4, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r6, 0x40603d10, &(0x7f0000000200)) readv(r6, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/139, 0x8b}, {&(0x7f00000006c0)=""/177, 0xb1}, {&(0x7f00000000c0)=""/61, 0x3d}, {&(0x7f0000000080)=""/14, 0xe}, {&(0x7f0000000340)=""/92, 0x5c}, {&(0x7f0000000180)=""/7, 0x7}, {&(0x7f0000000540)=""/91, 0x5b}], 0x7) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r7, 0x40603d10, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:00:56 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)) r5 = syz_open_dev$mouse(&(0x7f00000000c0), 0x6, 0x1410c0) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x0, 0x40}) ioctl$sock_proto_private(r6, 0x89e5, &(0x7f0000000540)="09df84eff85b397ff6816623e43396c0d70eb2aef1242e8e3777372c7189109a9a3d03a7cfe7959f92b4b3571d394ad4d3930aa462c59c1a269478163ce8e8b5fe77ea2347aefded3e388f43a1bac7ed4b86de89af15dbb8ad8762f43b0aa108d66016bd46655872bf4203cf3b3fa70415cebd97e1babbfaaf23a37c7b99a31ef9baa6f054aeeb23e407677d87cdf5783e667409031684307f85702122a9620cb0f35a8e89c11bb9ad5e0a") 15:00:56 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) 15:01:08 executing program 4: r0 = syz_io_uring_setup(0x804d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x360}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:01:08 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1800, 0x0, 0x0, 0x0) 15:01:08 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x600) 15:01:08 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2400, 0x0, 0x0) 15:01:08 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf257000000008000300", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000000000a0006000802110000010000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x45) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={r6, r7+10000000}}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={r10, r11+10000000}}, 0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r4, r9, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x2}, 0x9ad) close(r3) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r12, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:01:08 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:01:08 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a00, 0x0, 0x0, 0x0) 15:01:08 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x8010, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:01:08 executing program 4: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x1, 0x1, 0x11, 0x1d, 0x51, &(0x7f0000000880)}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="08018080ac0200006f010000080000009500000003000000000000000000000054c0eca821ffb5b8e5dfb55293bdc2d7d575af6e9c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/1333], 0x535) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:01:23 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3000, 0x0, 0x0, 0x0) 15:01:23 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2a00, 0x0, 0x0) 15:01:23 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000e, 0x2010, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={r8, r9+10000000}}, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r3, 0x0, &(0x7f00000000c0)='./file0\x00', 0x20, 0x200, 0x23456}, 0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x90002008}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:01:23 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={r6, r7+10000000}}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x210000, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r3, 0x80, &(0x7f0000000380)=@generic={0x28, "950c41694742aa4f27039ddee3b975758557c2db0d1b0f3baf4f6263aaa6f6e964495dbba84739ef664de4d29dac8bef3576ab75b15cb5f301b84590a719c4c3d8c7aab396bd5f1b9375b9714ba016997c1e1f62738874e942220cbb1102dbf989a784cb9b6f5ee55a4a983bd0d9f55169c75479c8ed35e2533af191d603"}, 0x0, 0x0, 0x1}, 0x0) close(r3) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r3, 0x0, &(0x7f0000000400)="eba77a644e4700f44aa8ca9712e9e2972f6257313c608436ac881c977a5ef925d5ec667be85684a6a0bb981d523208197d377d4bac6d6c3a92e2ff4ffc8d6e39e5b3af87dfd12790290eb2123381f35ce80e0475159152ec29649ffe8f4294b4d8d812cc11ca0f3f5bcd07fd5298d787fef8ad12afceeb3d40b58670250df8fb93cad43371086da8fa65dcbab626cb36", 0x90, 0x4060, 0x1}, 0x200) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_enter(r3, 0x1515, 0x9fb0, 0x1, &(0x7f0000000180)={[0x9]}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r9, 0x40603d10, &(0x7f0000000200)) ioctl$F2FS_IOC_FLUSH_DEVICE(r9, 0x4008f50a, &(0x7f0000000080)={0x9, 0x5}) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:01:23 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1e00, 0x0, 0x0, 0x0) 15:01:23 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fchdir(r4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:01:23 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00) 15:01:23 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x25a4, &(0x7f0000000080)={0x0, 0x4848, 0x8, 0x2, 0x1a0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r5, r2, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x2}, 0x800) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:01:24 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3000, 0x0, 0x0) 15:01:24 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={r8, r9+10000000}}, 0x0) syz_io_uring_setup(0x1129, &(0x7f0000000080)={0x0, 0xb83f, 0x1, 0x0, 0x22b}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000240)=0x0) syz_io_uring_submit(r6, r10, &(0x7f0000000540)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000280)=[{&(0x7f00000003c0)="c94bb82bc1fcd28a128133695cba49797961a7abce802f19df844a83883ad5632d07df3361ad9bcef8b0f22a02676f75d5def64a6c61842eb50139b5c685ae788b2cf4553a42999aab37d6b532fe5c7eab5c24e6cd9d28bca6fa4bee2d9abf69e0e7e95e7f758f6aa710247bf6536289e6c5c0b3334af889605d6a19a99543ead738f48bba7c259331", 0x89}, {&(0x7f0000000480)="89a887fb2f695129f0829ca1db8a9031e6f600fe34ff964b2d32bb31504fe19bfb99561b5b6e0246f25f06d65c1ebe9f8f5a12a31a7e203cec505342298446e45917017dce6bf47af93f0106ed303480237b8f6cc8", 0x55}], 0x2}, 0x0, 0x4000000, 0x1}, 0x1591) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:01:24 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x6004, @fd_index=0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, {0x2, r4}}, 0x2) r5 = socket$inet6(0xa, 0x80000, 0x57e9) accept4(r5, &(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x80, 0xa8001e446a0e9342) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x6004, @fd_index=0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, {0x2, r6}}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r6}}, 0x0) close(r3) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r8, 0x40603d10, &(0x7f0000000200)) ioctl$BTRFS_IOC_DEFRAG(r8, 0x50009402, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff, 0x0, @perf_bp={0x0, 0x3}, 0x100}, 0x0, 0x2, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) creat(&(0x7f0000000080)='./file0\x00', 0x168) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:01:24 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x4003, @fd_index=0x4, 0x9, 0x0, 0x0, 0x1, 0x1}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x10000000) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r7, 0x40603d10, &(0x7f0000000200)) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r8, 0x40603d10, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {r5}}, './file0\x00'}) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r10, 0x40603d10, &(0x7f0000000200)) sendfile(r10, r3, &(0x7f0000000280)=0xfffffffffffffff8, 0x1) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000180)=[r7, r3, r5, r8, r0, r9], 0x6, 0x0, 0x1}, 0x5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x7eaa, 0xb4da, 0x2, &(0x7f0000000080)={[0x5]}, 0x8) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:01:24 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3600, 0x0, 0x0) 15:01:24 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3, 0xffff}, 0xfffffffd) close(r3) write$P9_RXATTRCREATE(r3, &(0x7f0000000080)={0x7, 0x21, 0x2}, 0x7) r4 = getpgrp(0x0) r5 = perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x40, 0x0, 0x81, 0x0, 0x0, 0x467d, 0x1, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x94, 0x1, @perf_config_ext={0x3, 0x401}, 0x2380, 0xfff, 0x6, 0x2, 0xbf5, 0x1, 0x2, 0x0, 0x1, 0x0, 0x3}, r4, 0x8, r3, 0x3) ioctl$FICLONE(r5, 0x40049409, r3) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:01:37 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) r5 = dup2(r4, r4) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x30, r5, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000000, 0x4010, r5, 0x10000000) syz_io_uring_submit(r1, r7, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r6}}, 0x9) close(r3) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r9, 0x40b, &(0x7f0000000000)) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x5020}}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:01:37 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r2}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(r1, r0, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x2) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) close(r6) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:01:37 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3600, 0x0, 0x0, 0x0) 15:01:37 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 15:01:37 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3c00, 0x0, 0x0) 15:01:37 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:01:37 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1200) 15:01:37 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:01:37 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0) 15:01:37 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x25021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:01:37 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r5}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x2) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(r7, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r8}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(r7, r6, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(r6, 0x4b65, 0x2) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000080)=r6, 0x1) 15:01:37 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x6000000, 0x0, 0x0) 15:01:37 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xc000000, 0x0, 0x0) 15:01:37 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x400040, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x20, 0x40ea}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:01:38 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x19, 0x1, 0x0, 0x0, {0x0, 0xfc}}, 0x14}}, 0x0) r5 = dup(r4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f00000000c0)=0x3, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r5, &(0x7f0000007940)=[{{0x0, 0x0, 0x0}}], 0x500, 0x20000022, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6006, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x802}}, 0x0) close(r3) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) readv(r7, &(0x7f0000000240)=[{&(0x7f0000000340)=""/254, 0x105}, {&(0x7f0000000440)=""/127, 0x8b}, {&(0x7f0000001e00)=""/102400, 0x19000}, {&(0x7f0000000780)=""/185, 0xb9}, {&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f00000005c0)=""/217, 0xd9}, {&(0x7f00000006c0)=""/165, 0xa5}], 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:01:38 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1800) 15:01:38 executing program 1: r0 = syz_io_uring_setup(0x4d53, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x80010, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) fallocate(0xffffffffffffffff, 0x4, 0x800000000000000, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2252.419676] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2252.423698] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.4'. 15:01:49 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1e00) 15:01:49 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6001000010000100ff03000000000000ff0200000000000000000000000000010a010102000000000000000000000000008006009ce84ab790cb557f093eacb9397d475c00000000ff0f000000000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="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"], 0x160}}, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000b80)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000240)=""/125, 0x7d}], 0x1, &(0x7f0000000ac0)=""/51, 0x33}, 0x0, 0x10020, 0x0, {0x1}}, 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:01:49 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r0}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:01:49 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2400, 0x0, 0x0, 0x0) 15:01:49 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c00, 0x0, 0x0, 0x0) 15:01:49 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x20}}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:01:49 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000000c0)={0x3, 0x1, 0x8a, &(0x7f0000000340)=""/138}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000000080)={{0x2fa908d5, 0x9}, {0x280000}, 0x81, 0x1}) 15:01:49 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x12000000, 0x0, 0x0) 15:01:49 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x2, 0x1) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)}, 0x0) syz_io_uring_setup(0x6dbe, &(0x7f0000000240)={0x0, 0xa7f3, 0x4, 0x2, 0x1ae}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000380)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2000, @fd=r3, 0x0, 0x0, 0x0, 0x2, 0x0, {0x1, r8}}, 0x200) 15:01:49 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x18000000, 0x0, 0x0) 15:01:50 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:01:50 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1e000000, 0x0, 0x0) 15:01:50 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tun(r3, &(0x7f00000001c0)={@val={0x0, 0x88e5}, @val={0x3, 0x3, 0x5, 0x100, 0x8, 0x9}, @x25={0x1, 0x5, 0xfb, "aef87832c9c17b5c0c29594da7f3432b"}}, 0x21) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000180)={0x3, 0x71}) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:01:50 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x20}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x3ad1, &(0x7f0000000080)={0x0, 0x632a, 0x10, 0x3, 0x8b, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x399a, &(0x7f0000000240)={0x0, 0xa59c, 0x2, 0x3, 0x2f3, 0x0, r3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) r8 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd=r8, 0x0, 0x0, 0xfff, 0x0, 0x0, {0x0, r9, r5}}, 0xfff) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:02:03 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x401, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:02:03 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) 15:02:03 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 15:02:03 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83", @ANYRES32=0x0, @ANYBLOB="001800800000000600000005442000500064000000049078e000000262078a7f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101"]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r6}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, 0xffffffffffffffff, 0x0, r5}, 0xffffff73) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x20, 0xab, 0x0, 0x8}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:02:03 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) close(r4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:02:03 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:02:03 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a00, 0x0, 0x0, 0x0) 15:02:03 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0) 15:02:03 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x24000000, 0x0, 0x0) 15:02:03 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_setup(0x73f2, &(0x7f0000000340)={0x0, 0xbcaa, 0xaa41e444a662e592, 0x0, 0x1c, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x351605e8aef011c}, 0xff) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r6, 0x40603d10, &(0x7f0000000200)) ioctl$PTP_CLOCK_GETCAPS(r6, 0x80503d01, &(0x7f0000000080)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:02:03 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3000, 0x0, 0x0, 0x0) 15:02:03 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2a000000, 0x0, 0x0) 15:02:03 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000480)=0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000c, 0x110, r0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x6004, @fd_index=0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, {0x2, r5}}, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000440)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000280)='./file0\x00', 0x1, 0x900, 0x1, {0x0, r5}}, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = openat$cgroup(r3, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x6004, @fd_index=0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x2) syz_io_uring_submit(r6, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x0, @fd_index=0xa, 0xfffffffffffffffc, 0xffffffff, 0x5, 0x10, 0x1, {0x2}}, 0x81) signalfd4(r8, &(0x7f0000000500)={[0xcfc]}, 0x8, 0x80000) syz_io_uring_setup(0x262, &(0x7f0000000180)={0x0, 0x53ae, 0x4, 0x1, 0x38, 0x0, r7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:02:03 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) syz_io_uring_setup(0x44c9, &(0x7f0000000080)={0x0, 0xf3e9, 0x0, 0x3, 0x3b5, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000280)=0x0) getpgrp(0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_setup(0x2194, &(0x7f0000000340)={0x0, 0x620a, 0x4, 0x3, 0x2cf}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_io_uring_submit(r1, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x2) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r7, 0x40603d10, &(0x7f0000000200)) ioctl$PTP_ENABLE_PPS(r7, 0x40043d04, 0x1) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:02:03 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x30000000, 0x0, 0x0) 15:02:03 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x6000000, 0x0, 0x0, 0x0) 15:02:03 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x36000000, 0x0, 0x0) 15:02:03 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3600, 0x0, 0x0, 0x0) [ 2266.660450] audit: type=1400 audit(1686150124.147:15): avc: denied { map } for pid=11743 comm="syz-executor.7" path="pipe:[43706]" dev="pipefs" ino=43706 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 2266.663146] audit: type=1400 audit(1686150124.147:16): avc: denied { execute } for pid=11743 comm="syz-executor.7" path="pipe:[43706]" dev="pipefs" ino=43706 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 15:02:17 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="fd7c4a039d9a89ea0a3dea514217b878f33c4d0959262d0483f3f8227352f18ffb316f4387ae20812032a94f82d57c06a0b517f7bbae95d6b0756f107a45b412f410362aa166aef702dbca53b447b6e4ee03a6fb0879ef6d1a15e087177a7b638c5f4298ed6bcca416070ddf4c288b526cc7194c2deaccdf055edfdc74f784b6b7426de53a4c70d7b0f00daba71128ccea4030a76bb3ce59f8c5068e799f657e720a3bad36863ad9f817a7397c46cf9d11dbf095551528f6be853e83", @ANYRES32=0x0, @ANYBLOB="000800800000000600000005442000500064000000049078e00000027f000001830f13e00000027f000001e0000002940401008907c3e0000001891f8c00000000ffffffffe000000200000000ac1414aaac1414bbac1e0101010000"]}) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, r2}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(r1, r0, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000000c0)={0x9, 0x2, 0x1}) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r7, 0x40603d10, &(0x7f0000000200)) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_submit(0x0, 0x8, &(0x7f0000000980)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x8b, 0xffffffffffffffff, &(0x7f0000000440)="ea1a5eda869d32d9d907ec16b061f745ea6e20fe7d5509f9d83d27d68522e6feab812293c8f95e78afe0d080ade57aa3b034d42cdfaaa74a222918108f8772355bec4cc26a41dec458c91a824f0870ecb3d8bd0867a40f03ea0d0f1cd9d02639e1a722a919a531745e13ea2366e8737d8a58b01b5bcd3832d77932c2f69073ec16bdabc46df0759c25b7b1b5c3b9c549c717b61a6705097192a3f4497c3b700eec1233a5c22bdaa3704d23109a1720ba7c948cef1ceafb489d0192c65b5688b1750e3fea26eeb03389a91c1e91aff2ef8cf73191c7b839b1107a3964704a8277cc159b1818da3f53b1ca32f17e58c9b80007", 0xf2, 0x4}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x7fff, r3, &(0x7f0000000540)="41491d120a6ba1953d28d9ebe5c462597396834c24af5c1c1b431defec1dd151bb4942dc9bbb54a39548bb365dcd0b8fd8ae464503ba1c56b3b057cf7fe9f3ed3d1a5715e3096c9e5fc0e422e37b392d00e47aa6ac84f25e9bc1c45e8875386a0a46b9388f77fbd6331a377e31e6e9ee1b916e1dfafaf547cd9e7e033d3c5f83fc7e6e12098548daa088c3feed6cd145626bd6ab210d503f284512ad1b6c99683ae0888e4b31d89cface0db90ec95597087219a7110b2d17585dcb0817344cdbbd636e4ead", 0xc5, 0x5, 0x0, 0x2, r0}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x3249, 0xffffffffffffffff, &(0x7f0000001e00)="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", 0x1000, 0x2, 0x0, 0x1, r0}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x6, 0x8, 0xffffffffffffffff, &(0x7f00000006c0)="a16c3cc51838c6f03d50ef64b6c044f394f2", 0x12, 0xe6, 0x0, 0x3, r6}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x6, 0x1f, r7, &(0x7f0000000740)="32992e11f35bb94e415d1dfe449de278fb95e60d65f48c0d6417b22b5b5d90a7603eefe5683b97d932b1b4edac8d246f2413cad8a3edd0bcefdba936b94746f77c1ccff3e9bc98c0ea453bf830d9b93dec74a32b2d355ddac662aac408184095b0e27d9a149706f715dacbc293c097cab6a1327afdace491efb99d6129438f27807ca52b8782b7b5f629a646f427c71fd7606ea63cebbb8da399dd52e883a9", 0x9f, 0x3, 0x0, 0x3, r0}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x1, r6, &(0x7f0000002e40)="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", 0x1000, 0x0, 0x0, 0x3, r6}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x6, 0x4, r8, &(0x7f0000000880), 0x0, 0xfffffffffffffffd, 0x0, 0x6, r6}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x5, r3, &(0x7f0000000900)="d986efb047ad300f0d5516ba841efbe20cfe823363663b1927bc268283ce94322ee7be22b3ac49edbfcc7a0026", 0x2d, 0x55, 0x0, 0x6}]) close(r6) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000080)={0x0, r3, 0x0, 0x3553129f, 0x7, 0xe1c1}) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:02:17 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc000000, 0x0, 0x0, 0x0) 15:02:17 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2400) 15:02:17 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3fea, &(0x7f0000000080)={0x0, 0xf75a, 0x0, 0x1, 0xe1, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={r9, r10+10000000}}, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x4, 0x7, 0xfffffffffffff601}) syz_io_uring_submit(r6, r8, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r11, 0x0, 0x0, 0x0, 0x40010103, 0x0, {0x2}}, 0x9) 15:02:17 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3c00, 0x0, 0x0, 0x0) 15:02:17 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3c000000, 0x0, 0x0) 15:02:17 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x1a000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/keys\x00', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x481, 0x81f5, 0x1, &(0x7f0000000080)={[0x367]}, 0x8) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x705, &(0x7f0000000180)={0x0, 0xe4e1, 0x4, 0x2, 0x2c0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000240)) 15:02:17 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r4, 0x40603d10, &(0x7f0000000200)) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000080)={0x3, 0x2, 0x2}) getpgrp(0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r7, 0x40603d10, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYRES32=r7, @ANYBLOB="000000002e2f66696c65301b"]) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:02:17 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0) 15:02:17 executing program 7: r0 = syz_io_uring_setup(0x6286, &(0x7f00000002c0)={0x0, 0xa607}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) fallocate(r5, 0x33, 0x1, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:02:17 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x12000000, 0x0, 0x0, 0x0) 15:02:17 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = syz_open_dev$vcsn(&(0x7f0000000080), 0x5, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x105c, r5, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x79}, @void, @val={0xc, 0x99, {0x5e, 0x5e}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3f}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}]}, 0x105c}, 0x1, 0x0, 0x0, 0x40040}, 0x4001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:02:17 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0xa96, 0x3, &(0x7f0000000340)="36447454eaea5e36f46e28d57c815fc277c63f03af8b8309fdeb0a957517cc48541339238193fcb8b8ef2b7ed4ff3178cd28f3e1b63356b52f59e40ec1731c2d9a6530c790a57d967a8b00765346a5ac49258ba59109b7895e476260834ed78337f99310d3c9c410321d7a72c80932b019f6f0a4d3ff962d142296275fed78e4168bf8ae925638aed7a98b3fa5641712b4acff2dda879f3c1385867c6bad519059a662c9e08afef784aa019e75fead409e8afe9cedbdeefd", 0x8001}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:02:17 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/37, 0x25}, {&(0x7f0000001140)=""/65, 0x41}], 0x2}, 0x40010000) ioprio_get$pid(0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001200)={0x0, 0x0, {}, {}, {0x0, @struct}}) r5 = gettid() kcmp(0x0, r5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000840)) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/4096, 0x1000, 0xb9) 15:02:17 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2a00) 15:02:17 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x7, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x2) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x1130, 0x21, 0x100, 0x70bd2a, 0x25dfdbfd, {0xc}, [@typed={0x8, 0x16, 0x0, 0x0, @ipv4=@empty}, @generic="121487cfb213cb63d111c2c3a00beb10e1826798bd38be4d3636b86102a65c7869892bb36b6700b6293aa9d5896f908f8d328afb87b7902ba70a4e87f8cca6e8f81e71b3e14017d9def37b17effaafdffbbedcc9d8b7cfccb77b413b2494321ab4e93921553ec37def298c1eb6811840234842c0153339071a1218cdec2ba8befc2a3d23b1c74a5e2ddc5427ecc79371e29e0067fcf256738bb7caa9c9df011aca383d5f1768287d6ae12892ae2bbcb10b07da1c3b0fe70f7cb73e4b85ffd390f4e397799d8554ddf6dc1cb9860ff6a1c171b9c0022c598193bd2c270d63c91396389549285a8b4750a793e7bef839494298c45301760f4f5b", @generic="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", @generic="4ecceecb6bad1699b5d0d4ac81ea4294", @typed={0x8, 0x4b, 0x0, 0x0, @uid=r5}]}, 0x1130}, 0x1, 0x0, 0x0, 0x4080}, 0x4001) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:02:18 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = eventfd(0x400) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000080)=r5, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:02:18 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x404400, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xfffffffa}}, './file0\x00'}) r5 = getpgrp(0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r8 = getpid() tgkill(r8, r5, 0x40) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:02:18 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = gettid() setpgid(0x0, r7) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8, 0x7f, 0x1, 0x7a, 0x0, 0x4, 0x1, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0xc300, 0x4, 0x1ff, 0x4, 0xfffffffffffffff9, 0x4, 0x7fff, 0x0, 0xffff0001, 0x0, 0x2f}, r7, 0x4, r6, 0x2) ptrace(0x8, r7) getpgrp(r7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:02:18 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0) 15:02:18 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3000) 15:02:18 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x5, 0x1d0, 0x9}) clock_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x18000000, 0x0, 0x0, 0x0) 15:02:18 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x600000000000000, 0x0, 0x0) 15:02:18 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:02:18 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) getpgrp(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x6, 0x5, 0x0, 0x9}) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r6, 0x40603d10, &(0x7f0000000200)) write$binfmt_script(r6, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\'\\'}, {0x20, '/dev/full\x00'}, {0x20, '^)&'}, {0x20, '\xb2\xff,\x13/{'}], 0xa, "c35860fb3f853c00e547f9016b3db5175af2797eae7df40dc271ddf2122e98330a3aa43b632b8bc0d0fec7f5e2bde1f64bcf644679159051a7910df3371ba071b254783c05739c3be4586165ff6b391881cc294f60"}, 0x79) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2300.459310] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2300.461687] CPU: 0 PID: 259 Comm: syz-fuzzer Not tainted 5.10.181 #1 [ 2300.462991] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2300.464692] Call Trace: [ 2300.465234] dump_stack+0x107/0x167 [ 2300.465974] dump_header+0x106/0x65e [ 2300.466731] oom_kill_process.cold+0x10/0x15 [ 2300.467616] out_of_memory+0x1149/0x1440 [ 2300.468457] ? oom_killer_disable+0x280/0x280 [ 2300.469367] ? mutex_trylock+0x237/0x2b0 [ 2300.470191] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 2300.471388] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 2300.472586] ? lock_acquire+0xd7/0x470 [ 2300.473381] ? warn_alloc+0x190/0x190 [ 2300.474175] __alloc_pages_nodemask+0x51d/0x600 [ 2300.475116] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2300.476338] ? find_get_entry+0x2c8/0x740 [ 2300.477186] alloc_pages_current+0x187/0x280 [ 2300.478069] __page_cache_alloc+0x2d2/0x360 [ 2300.478941] pagecache_get_page+0x2c7/0xc80 [ 2300.479825] filemap_fault+0x177d/0x2210 [ 2300.480653] ? read_cache_page_gfp+0x30/0x30 [ 2300.481543] ? replace_page_cache_page+0x1200/0x1200 [ 2300.482567] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2300.483636] ext4_filemap_fault+0x87/0xc0 [ 2300.484502] __do_fault+0x113/0x410 [ 2300.485240] handle_mm_fault+0x1e72/0x3520 [ 2300.486113] ? ep_read_events_proc+0x3d0/0x3d0 [ 2300.487028] ? __pmd_alloc+0x5e0/0x5e0 [ 2300.487823] ? vmacache_find+0x55/0x2a0 [ 2300.488630] ? vmacache_update+0xce/0x140 [ 2300.489470] do_user_addr_fault+0x56e/0xc60 [ 2300.490359] exc_page_fault+0xa2/0x1a0 [ 2300.491143] ? asm_exc_page_fault+0x8/0x30 [ 2300.492026] asm_exc_page_fault+0x1e/0x30 [ 2300.492853] RIP: 0033:0x4666e0 [ 2300.493519] Code: Unable to access opcode bytes at RIP 0x4666b6. [ 2300.494739] RSP: 002b:000000c00003b7f0 EFLAGS: 00010246 [ 2300.495825] RAX: 0000000000000000 RBX: 00000000000003e7 RCX: 00000000004666e0 [ 2300.497258] RDX: 0000000000000080 RSI: 000000c00003b840 RDI: 0000000000000003 [ 2300.498690] RBP: 000000c00003be40 R08: 0000000000000000 R09: 0000000000000000 [ 2300.500136] R10: 00000000000003e7 R11: 0000000000000246 R12: 0000000000000003 [ 2300.501567] R13: 000000c000000c00 R14: 0000000000000004 R15: ffffffffffffffff [ 2300.503155] Mem-Info: [ 2300.503676] active_anon:16414 inactive_anon:61486 isolated_anon:0 [ 2300.503676] active_file:3 inactive_file:0 isolated_file:0 [ 2300.503676] unevictable:0 dirty:0 writeback:0 [ 2300.503676] slab_reclaimable:8428 slab_unreclaimable:249377 [ 2300.503676] mapped:69634 shmem:183 pagetables:1531 bounce:0 [ 2300.503676] free:3142 free_pcp:114 free_cma:0 [ 2300.509945] Node 0 active_anon:65656kB inactive_anon:245944kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:732kB writeback_tmp:0kB kernel_stack:4288kB all_unreclaimable? yes [ 2300.514544] Node 0 DMA free:6512kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2300.519734] lowmem_reserve[]: 0 1616 1616 1616 [ 2300.520738] Node 0 DMA32 free:6056kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:65656kB inactive_anon:245944kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660504kB mlocked:0kB pagetables:6124kB bounce:0kB free_pcp:456kB local_pcp:0kB free_cma:0kB [ 2300.526433] lowmem_reserve[]: 0 0 0 0 [ 2300.527268] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6512kB [ 2300.530100] Node 0 DMA32: 628*4kB (UME) 192*8kB (UME) 84*16kB (UME) 18*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5968kB [ 2300.532935] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2300.534644] 186 total pagecache pages [ 2300.535423] 0 pages in swap cache [ 2300.536149] Swap cache stats: add 0, delete 0, find 0/0 [ 2300.537227] Free swap = 0kB [ 2300.537829] Total swap = 0kB [ 2300.538457] 524158 pages RAM [ 2300.539082] 0 pages HighMem/MovableOnly [ 2300.539886] 105055 pages reserved [ 2300.540679] Unreclaimable slab info: [ 2300.541794] Name Used Total [ 2300.542994] pid_2 72KB 75KB [ 2300.544117] IEEE-802.15.4-MAC 63KB 63KB [ 2300.545208] IEEE-802.15.4-RAW 63KB 63KB [ 2300.546295] p9_req_t 8KB 8KB [ 2300.547392] fib6_nodes 28KB 28KB [ 2300.548499] ip6_dst_cache 48KB 48KB [ 2300.549609] RAWv6 220KB 220KB [ 2300.550721] UDPLITEv6 62KB 62KB [ 2300.551829] UDPv6 62KB 62KB [ 2300.552944] tw_sock_TCPv6 15KB 15KB [ 2300.554033] request_sock_TCPv6 15KB 15KB [ 2300.555165] TCPv6 62KB 62KB [ 2300.556278] scsi_sense_cache 8KB 8KB [ 2300.557367] sd_ext_cdb 3KB 3KB [ 2300.558458] virtio_scsi_cmd 16KB 16KB [ 2300.559556] sgpool-128 59KB 59KB [ 2300.560654] sgpool-64 63KB 63KB [ 2300.561741] sgpool-32 47KB 47KB [ 2300.562837] sgpool-16 45KB 45KB [ 2300.563951] sgpool-8 33KB 33KB [ 2300.565151] io_kiocb 1668KB 2553KB [ 2300.566258] mqueue_inode_cache 62KB 62KB [ 2300.567380] nfs_commit_data 15KB 15KB [ 2300.568825] nfs_write_data 47KB 47KB [ 2300.570128] jbd2_inode 7KB 7KB [ 2300.571412] ext4_system_zone 7KB 7KB [ 2300.572740] ext4_io_end_vec 7KB 7KB [ 2300.574055] ext4_bio_post_read_ctx 15KB 15KB [ 2300.575454] kioctx 31KB 31KB [ 2300.576743] aio_kiocb 7KB 7KB [ 2300.578040] bio-2 4KB 4KB [ 2300.579335] fasync_cache 7KB 7KB [ 2300.580625] pid_namespace 7KB 7KB [ 2300.581925] posix_timers_cache 7KB 7KB [ 2300.583226] rpc_buffers 31KB 31KB [ 2300.584463] rpc_tasks 3KB 3KB [ 2300.585544] UNIX 331KB 403KB [ 2300.586628] UDP-Lite 31KB 31KB [ 2300.587710] tcp_bind_bucket 8KB 8KB [ 2300.588789] xfrm_state 16KB 16KB [ 2300.589864] ip_fib_trie 8KB 8KB [ 2300.590936] ip_fib_alias 15KB 15KB [ 2300.592029] ip_dst_cache 32KB 32KB [ 2300.593102] RAW 93KB 93KB [ 2300.594200] UDP 252KB 252KB [ 2300.595296] tw_sock_TCP 15KB 15KB [ 2300.596404] request_sock_TCP 7KB 7KB [ 2300.597497] TCP 60KB 60KB [ 2300.598607] hugetlbfs_inode_cache 15KB 15KB [ 2300.599801] bio-1 11KB 11KB [ 2300.600921] eventpoll_pwq 23KB 23KB [ 2300.602011] eventpoll_epi 39KB 39KB [ 2300.603091] inotify_inode_mark 46KB 46KB [ 2300.604209] request_queue 60KB 60KB [ 2300.605281] blkdev_ioc 15KB 15KB [ 2300.606366] bio-0 60KB 60KB [ 2300.607446] biovec-max 624KB 624KB [ 2300.608532] biovec-64 157KB 189KB [ 2300.609616] biovec-16 26KB 26KB [ 2300.610719] user_namespace 15KB 15KB [ 2300.611818] uid_cache 8KB 8KB [ 2300.612922] dmaengine-unmap-2 4KB 4KB [ 2300.614025] audit_buffer 7KB 7KB [ 2300.615125] skbuff_fclone_cache 120KB 120KB [ 2300.616265] skbuff_head_cache 56KB 56KB [ 2300.617370] file_lock_cache 23KB 39KB [ 2300.618463] file_lock_ctx 7KB 7KB [ 2300.619564] fsnotify_mark_connector 24KB 24KB [ 2300.620755] net_namespace 115KB 115KB [ 2300.621840] task_delay_info 108KB 108KB [ 2300.622941] taskstats 61KB 61KB [ 2300.624040] proc_dir_entry 353KB 363KB [ 2300.625142] pde_opener 31KB 31KB [ 2300.626242] seq_file 71KB 71KB [ 2300.627344] sigqueue 15KB 27KB [ 2300.628430] shmem_inode_cache 1268KB 1383KB [ 2300.629506] kernfs_iattrs_cache 219KB 219KB [ 2300.630621] kernfs_node_cache 5284KB 5288KB [ 2300.631700] mnt_cache 171KB 189KB [ 2300.632811] filp 1416KB 1740KB [ 2300.633933] names_cache 8695KB 10085KB [ 2300.635008] hashtab_node 274KB 274KB [ 2300.636105] ebitmap_node 1149KB 1149KB [ 2300.637198] avtab_node 4976KB 4976KB [ 2300.638302] avc_node 35KB 35KB [ 2300.639393] lsm_inode_cache 3251KB 3300KB [ 2300.640504] lsm_file_cache 168KB 188KB [ 2300.641587] key_jar 39KB 39KB [ 2300.642692] uts_namespace 15KB 15KB [ 2300.643773] nsproxy 7KB 7KB [ 2300.644898] vm_area_struct 959KB 1260KB [ 2300.645996] mm_struct 290KB 346KB [ 2300.647071] fs_cache 64KB 64KB [ 2300.648151] files_cache 255KB 255KB [ 2300.649227] signal_cache 290KB 401KB [ 2300.650307] sighand_cache 328KB 360KB [ 2300.651394] task_struct 1161KB 1575KB [ 2300.652486] cred_jar 121KB 148KB [ 2300.653564] anon_vma_chain 223KB 275KB [ 2300.654664] anon_vma 237KB 274KB [ 2300.655770] pid 59KB 90KB [ 2300.656870] Acpi-Operand 234KB 253KB [ 2300.657976] Acpi-ParseExt 27KB 27KB [ 2300.659078] Acpi-Parse 185KB 201KB [ 2300.660191] Acpi-State 165KB 181KB [ 2300.661287] Acpi-Namespace 24KB 24KB [ 2300.662384] numa_policy 7KB 7KB [ 2300.663471] trace_event_file 163KB 163KB [ 2300.664572] ftrace_event_field 280KB 280KB [ 2300.665682] pool_workqueue 32KB 32KB [ 2300.666766] task_group 16KB 16KB [ 2300.667858] vmap_area 252KB 252KB [ 2300.668955] page->ptl 269KB 271KB [ 2300.670062] kmemleak_scan_area 151KB 151KB [ 2300.671177] kmemleak_object 762439KB 762439KB [ 2300.672283] kmalloc-8k 4592KB 4704KB [ 2300.673384] kmalloc-4k 6280KB 6976KB [ 2300.674496] kmalloc-2k 4156KB 4704KB [ 2300.675612] kmalloc-1k 2154KB 3712KB [ 2300.676788] kmalloc-512 27509KB 28208KB [ 2300.677919] kmalloc-256 1212KB 1224KB [ 2300.679008] kmalloc-192 477KB 488KB [ 2300.680116] kmalloc-128 502KB 520KB [ 2300.681291] kmalloc-96 839KB 2196KB [ 2300.682388] kmalloc-64 825KB 1000KB [ 2300.683470] kmalloc-32 91256KB 91256KB [ 2300.684550] kmalloc-16 356KB 380KB [ 2300.685627] kmalloc-8 322KB 322KB [ 2300.686717] kmem_cache_node 47KB 47KB [ 2300.687822] kmem_cache 78KB 78KB [ 2300.688928] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=259,uid=0 [ 2300.693691] Out of memory (oom_kill_allocating_task): Killed process 256 (syz-fuzzer) total-vm:1239828kB, anon-rss:276216kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:916kB oom_score_adj:0 [ 2302.134903] oom_reaper: reaped process 11823 (syz-executor.6), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB VM DIAGNOSIS: 15:02:39 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81f2ebb3 RDX=00000000000001f5 RSI=ffffffff81f2ebc1 RDI=0000000000000007 RBP=00000000000101f5 RSP=ffff88801f28ea80 R8 =0000000000000000 R9 =0000000000006d2c R10=0000000000010000 R11=0000000000000001 R12=ffff88800f660058 R13=ffff88800f660050 R14=ffff88800f660048 R15=ffff88800f660060 RIP=ffffffff81f2ebc7 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ffa19c3a900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff4c72ab750 CR3=000000001d0d0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffff00ffffffffffffffffffffff XMM01=707465675f6c697475646f6d6d61705f XMM02=ff000000000000ff0000000000ff0000 XMM03=66207463656e6e6f6373696420646576 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=00000000000000000000000000000000 XMM08=000a0d732a2e25006c61746166003367 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=000000000164ba70 RCX=ffffffff8124d29e RDX=ffff88801505cec0 RSI=ffffffff8130d9bd RDI=ffff88806cf3bea0 RBP=ffff88806ce2eb00 RSP=ffff88806cf09c48 R8 =0000000000000000 R9 =ffffffff8567058f R10=fffffbfff0ace0b1 R11=0000000000000001 R12=0000000000000000 R13=ffff88806cf3bea0 R14=dffffc0000000000 R15=dffffc0000000000 RIP=ffffffff8130d9ef RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007effa376a700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff8c07b5020 CR3=000000004d09c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756f6a2f646d65747379732f6e75722f XMM01=00676f6c7379732f6c616e72756f6a2f XMM02=756f6a2f646d65747379732f6e75722f XMM03=006c616e72756f6a2f646d6574737973 XMM04=f8ac03c2210485af00000000000ae968 XMM05=eda53f90bd3f8cb200000000003d9ba0 XMM06=423dadd548e1742900000000003d9aa8 XMM07=754047c75be62074000000000012ab30 XMM08=4f5453444600273d67736d000d0a0920 XMM09=00000000000000000000000000000000 XMM10=20202020200000000000000020000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000